Movable Type 7 r.5509 (v.7.906.4) Release Notes

This version of Movable Type was released August 20, 2025.

This version includes security fixes.

Resolved issues

Security fixes and improvements

• Fixed an issue where manipulation of the HTTP request Host header could lead to redirection to malicious sites (MTC-30358) (CVE-2025-53522)
  • Allowed setting trusted hostnames via the configuration directive TrustedHosts
• Improved the password reset screen to reject invalid parameters (MTC-30384)(CVE-2025-55706)

Checksums

• MT7-R5509 SHA1,SHA256
• MTA7-R5509.zip SHA1,SHA256