Plone has been having a rash of severe, critical, security compromises to all versions the past seveal months, and even their hotfixes and newer releases have ended up regressing back into newer versions. The multiple exploits this year have been severe, and impacting all versions of Plone since at least 2.5.
