diff --git a/docs/changelog/7.x.x.txt b/docs/changelog/7.x.x.txt
index f0ac4b9d4..c680324c8 100644
--- a/docs/changelog/7.x.x.txt
+++ b/docs/changelog/7.x.x.txt
@@ -1,6 +1,8 @@
 7.10.18
  - fixed #12141: Macro_RenderThingData (bad tags) nothing to translate
  - fixed #12142: Copy fails on imported threads
+ - canView will now be checked before calling ANY www_ method on account
+   plugins to fix an Inbox security bug (and other similar potential bugs).
 
 7.10.17
  - fixed: Forced to use a PayDriver even with a balance of 0 in the cart.
diff --git a/docs/gotcha.txt b/docs/gotcha.txt
index c447314d8..e66375145 100644
--- a/docs/gotcha.txt
+++ b/docs/gotcha.txt
@@ -10,6 +10,10 @@ save you many hours of grief.
 7.10.15
 --------------------------------------------------------------------
     * WebGUI now depends on Geo::Coder::Googlev3 for it's Map asset
+    * canView has to pass for any www_ methods to get called at all on account
+      plugins. This is the correct behavior, but is a change in this version.
+      Please review your custom account plugins to make sure you aren't
+      relying on the old buggy behavior.
 
 7.10.13
 --------------------------------------------------------------------