It has come to our attention that there is a security issue in both Pro Edition v4.9.4 r25, Pro Edition v4.9.4 r40, and ULTRA v1.51. You can secure Pro Edition, and Ultra site's by one of the following methods:
1) Update to version Pro Edition v4.9.4 r250 or Pro Edition v4.9.4 r41, or ULTRA v1.51 .
2) Disable site stats. Disabling site stats will effectvley protect your site from this exploit without needing to update the site.
3) Manually update the site stats file. To do this download this file http://www.soholaunch.com/media/pgm-site_stats.inc.zip . Extract pgm-site_stats.inc.php from the downloaded .zip and upload it to /sohoadmin/client_files/statistics/ and overwrite the existing file. You should also overwrite the /pgm-site_stats.inc.php in the site's web root directory.
Web hosts who use cpanel/WHM can mass update all sites with the patched file by doing the following:
Login to your server via SSH as root and run the following commands:
rm -f statsfix.zip