Last week, the Plone security teams announced the discovery of a series
of security issues affecting all recent versions of Plone, as well as
the planned release of a Hotfix to address this issue to be made today,
Tuesday 6th November at 1500 UTC.
Assistance in installing this hotfix is available free of charge via
IRC in #plone. If you don't have in-house server administrators
or a service agreement supporting your website, you can find
consultancy companies under the providers section of Plone.org -