MODX has a pretty good track record of being secure, but that doesn't mean it's invulnerable. Today MODX Revolution 2.6.5 was released with critical security fixes that can lead to a fully compromised site.

You should start upgrading your sites immediately. If your sites are hardened (with all MODX directories renamed or moved), that only offers limited protection against the patched vulnerabilities, so you should still upgrade.

Download MODX 2.6.5

Read the security announcement and the release post.