Upgrading may not help this particular problem, but my reccomendation was based on the fact that running a version with a known exploit can lead to bigger problems down the road. For example, I was reviewing my sites the other day and found that a site running 4.05.05 had been completely compromised, and they had deleted all the files in the wwwroot folder, and replaced the default.aspx file with their own "We Pwn'd your site" file along with a mess of other default.asp, default.php, etc. files. As we run very thorough backups off our web and DB servers, we were able to recover the site before the client noticed, but it can still happen to anyone running a version that allows for the file upload vulnerability. As far as the GMail SMTP thing, not quite sure - this was just a 'fair warning' notice. In all honesty, the 4.x -> 4.9.5 process is pretty painless and there are a great set of instructions available on Mitch Sellers' site, for instance: Upgrading to DNN 4.9.0 from 4.x

---

Wells Doty Jr
Online Content Development