DomainMOD News

DomainMOD v4.24.02 Released -- SSL Certificate Security Fix

Tue, 10 Nov 2026 17:15:06 PST

We've just released DomainMOD v4.24.02, a security update that we recommend everyone installs as soon as possible.

Until now, most of DomainMOD's connections to registrar APIs, to Data Warehouse servers, and for the update check didn't verify the other server's SSL certificate, so someone able to intercept your server's network traffic could have pretended to be one of those services and captured the API keys and tokens DomainMOD sends. Every one of those connections now verifies the certificate, and they all have timeouts, so an unresponsive server can no longer hang an import.

If you use the Data Warehouse with a WHM server that has a self-signed certificate, there's a new Verify SSL Certificate setting for each server. It's on by default, so that server's builds will fail until you give it a valid certificate or switch the setting off for it, which you should only do on a network you trust. If your registrar API calls start failing with an SSL certificate error after upgrading, the Troubleshooting section of the User Guide explains how to fix it.

For the full list of changes you can view the changelog, or click here to upgrade to v4.24.02.

DomainMOD v4.24.01 Released -- Read-Only User Security Fix

Sun, 08 Nov 2026 21:05:55 PST

Just a day after v4.24.0, DomainMOD v4.24.01 is here with a small security fix, so we recommend that everyone upgrades as soon as possible.

This release fixes an issue with read-only users, where some pages only checked the read-only setting when a form was submitted, so a read-only user could still delete or change some data. Every page that changes data now checks it first, and administrators marked as read-only can view the administration pages but not change anything there.

Nothing else has changed, so if you're on v4.24.0, upgrading is quick. If you're upgrading from an older version, see the v4.24.0 news post for everything else that's new.

For the full list of changes you can view the changelog, or click here to upgrade to v4.24.01.

DomainMOD v4.24 Released -- Security Fix, Cloudflare & Hostinger Updates

Sun, 08 Nov 2026 19:03:34 PST

DomainMOD v4.24.0 is out, and since it includes a security fix, we recommend that everyone upgrades as soon as possible.

The security fix is for password resets: they now email you a single-use link, and your password is only reset (with the new one emailed to you) once you use it.

Some of the other work done in this release includes:

Added Hostinger support to the Domain Queue
Added support for database servers that require encrypted connections (you can check the connection's status under Administration > System Information, and the User Guide has all the details)
Added support for Gandi's personal access tokens
Moved Cloudflare to their current Registrar API, which supports API tokens and accounts with more than 20 domains
Fixed a bunch of Domain Queue and Task Scheduler issues

Please note that DomainMOD now requires PHP 8.2 or later, as PHP 8.1 is no longer supported. If your server is still running PHP 8.1, you'll need to upgrade PHP before you upgrade DomainMOD.

For the full list of changes you can view the changelog, or click here to upgrade to v4.24.0.

DomainMOD Security Notice -- Please Update PHP Now

Thu, 22 Oct 2026 08:22:29 PST

On October 21st the PHP project released fixes for two critical security vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (nicknamed "PHP2Shell"). They let an attacker run their own code on your server without logging in, just by sending it specially crafted web requests.

These are bugs in PHP itself, not in DomainMOD, but since every DomainMOD installation runs on PHP, every installation is affected until PHP is updated.

If you run DomainMOD using Docker: we've rebuilt the official DomainMOD Docker image on PHP 8.2.35, which includes both fixes. Run docker compose pull and then docker compose up -d to update. Pulling on its own isn't enough, as your container will keep running the old image until it's recreated.

If you run DomainMOD on your own server: update PHP to 8.2.35, 8.3.36, 8.4.27, or 8.5.12 (or newer), and then restart your web server and PHP. PHP 8.1 and older won't receive a fix, so if you're on PHP 8.1 please move to PHP 8.2.35.

If you're on shared hosting or installed using Softaculous: your host controls PHP, so check that they've updated it.

For more details you can view the official security advisories for CVE-2026-109618 and CVE-2026-109619.

DomainMOD v4.23 Released -- A Few More Updates

Sat, 04 Jan 2025 12:26:00 PST

Although we just released v4.22.0 a couple days ago, we wanted to get another release out to help with a handful open support issues.

Some of the work done in this release includes:

Added 16 new languages
Added the ability to send a test email
Added the ability to quickly set missing fees to 0

DomainMOD v4.22 Released -- Maintenance Update

Wed, 01 Jan 2025 20:09:00 PST

There's not a whole lot to report on with this release, as it was mostly some small maintenance tasks.

Some of the work done in this release includes:

Updated to a new currency converter that will hopefully stick around for a while
Updated the Porkbun API URL
Fixed a couple bugs that caused the Add Domain and Add SSL Cert buttons to not display in rare situations
Fixed a handful of menu items that were still hard-coded in English and weren't being translated into other languages

Other than the above items this release was mostly just software dependency and copy updates.

DomainMOD v4.21 Released -- Porkbun API Support

Sun, 03 Mar 2024 20:29:00 PST

Users have been asking about Porkbun API support for quite a while now, and as much as I've wanted to implement it (after all I have some domains with them myself), unfortunately their API didn't allow you to retrieve all of the information required to incorporate it into DomainMOD. Luckily Porkbun's API was recently updated, and that's now changed.

So, as of v4.21.0, DomainMOD now has Porkbun API support!

That's it, that's the whole release. Short 'n' sweet.

If you use Porkbun yourself, and would like to import your domains and their details using their API, click here to upgrade to v4.21.0.

DomainMOD v4.20 Released -- Compatibility Updates

Sun, 03 Sep 2023 16:15:00 PST

Unfortunately this isn't a fun or sexy release with a bunch of new features, but it's a much needed one. Since there hasn't been a new release of DomainMOD for a little while now, some of the underlying software version requirements got a bit out-of-date. Some of the newest versions of MariaDB and MySQL had compatibility issues, and would throw errors in certain situations.

I've spent a bunch of time in v4.20 updating DomainMOD to work with all of the currently-supported versions of PHP*, MariaDB, and MySQL, and the newest DomainMOD version requirements are as follows:

PHP: 8.1-8.2.9
MariaDB: 10.4-11.1.2 or MySQL 5.7-8.1.0

If you're planning to upgrade DomainMOD, you should make sure that your server meets the above requirements. If it's still running PHP 8.0, you should wait until you can upgrade your server to PHP 8.1 or higher before you upgrade to DomainMOD v4.20.

* - Although PHP 8.0 is technicaly being supported for a couple more months, some of DomainMOD's dependencies now require PHP 8.1, so we've had to retire PHP 8.0 support a little bit early.

DomainMOD v4.19 Released -- CSV Importer & Cloudflare API Support

Mon, 25 Apr 2022 21:15:00 PST

Since launching our new Support Portal & Roadmap, we've had two features stand out as the most requested and upvoted, the ability to import domains using a CSV file, and support for Cloudflare's API. Well I'm happy to announce that as of DomainMOD v4.19.0, which was released yesterday, both of these features have now landed.

A CSV importer has been requested a bunch of times, even before the Roadmap existed, and I've always known that it's something I wanted to implement, it just hadn't happened yet. I think one of the reasons I was hesitant to start on the CSV Importer is because I knew what a big project it was going to be in the end, and how much time was going to be involved, at least for the final version that I kept picturing in my head. I started thinking about the CSV Importer again recently and it dawned on me... who cares about the final version? I just needed to build a first version, and things will grow from there. So that's exactly what I did, I buckled down in my spare time over the past week and I came up with a CSV Importer that I think is both functional and flexible, and should handle most use cases.

Now one of the fastest ways to get your domains into DomainMOD is to use the CSV Importer. You simply download the sample CSV template, enter as little or as much of your domain data into the CSV file as you want, and then import it, it's that simple. Although you should keep in mind that if you only enter your domains (the minimum requirement to submit a CSV import request), the system is going to create some default assets for you so that it has something to link your domains to, and these assets will probably need some cleanup done to them later on. We generally recommend that you take the time to enter as much information as you can into the CSV file, that way you'll have the most complete picture of your domain data as possible.

And the second most requested and upvoted feature recently, support for Cloudflare's API, is also here. Now if you use Cloudflare as a domain registrar you can use their API to import your domains and their details into DomainMOD. Cloudflare didn't always offer domain registrations, just incoming transfers, and they didn't always expose domain details via an API, so it just wasn't previously possible to incorporate Cloudflare into DomainMOD. Luckily some things have changed and Cloudflare now had everything we needed to implement their API, so it's finally been done!

DomainMOD v4.18 Released -- It's a Big One!

Sat, 24 Jul 2021 13:52:00 PST

Where to start, where to start. Well, I guess I'll start by saying that what v4.18 lacks in quantity, it definitely makes up for in quality. You see, there were only a handful of line items for this version release, however it was a pretty massive update in a couple ways.

Big update number one, which is probably the one that most users will be interested in, is that DomainMOD has had a complete redesign. The majority of the layout itself hasn't changed, so the UI will still feel familiar, however the graphical elements have been updated and should feel more modern.

There's also another exciting thing that's come along with the redesign, something that's basically a must-have these days but DomainMOD has been missing. Some of you have probably already guessed what the feature is, but for the others I'll just spit it out. It's dark mode. DomainMOD FINALLY has a dark mode. Now when you're up way too late working on your domains, you can help reduce eye strain simply by flipping the dark mode switch.

The second big update, which most people probably won't care much about (at least not as much as dark mode!), are a bunch of security enhancements that have been made. We recently signed up for a penetration testing service so that we could get actionable recommendations on how to increase the overall security of DomainMOD, and we've worked hard to implement as many of those recommendations as possible. In fact, we initially went a little overboard and locked things down a bit too much, but we've already rolled that change back :)

Also, although not directly related to this version release, we do have a couple other updates to share with you as well.

First, our website has also undergone a complete redesign. After we redesigned DomainMOD we felt that the website seemed a bit dated, so of course that had to be redone as well. We're also going to be working on a complete redesign of our User Guide, so stay tuned for that.

And last, but definitely not least, is our new Support Portal. Not only does the new portal allow users to submit feedback, questions, and issues, but users can then vote on the items that are most important to them, which helps us prioritize what should be worked on next. There's also a built-in Roadmap, which will allow users to follow DomainMOD's development progress.