As Joomla 3.6.3 released several days ago, it arose some critical security issues. Joomla 3.6.4 is out to solve two critical security vulnerabilities and a bug fix for two-factor authentication. We strongly recommend you to update your sites immediately.