vBulletin
Security Risk Profile
62
/100
highSecurity Risk Score
Comprehensive risk assessment based on 60 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 21, 2005 to present
60
Total CVEs
24
Critical+High
5
Exploited
20
Unpatched
Threat Assessment
Avg CVSS
6.7
Base severity
Avg EPSS
8%
Exploit probability
Unpatched
20
Critical/High
Risk Level
62/100
high
⚠️ 5 Active Exploits⚡ 3 Zero-Days📈 3 in Last 30 Days
Severity Distribution
Critical
14High
10Medium
31Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
2<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
19
2
SQL Injection
11
3
Code Injection
5
4
Input Validation
4
5
Path Traversal
2
Most Affected Products
1. vBulletin vBulletin175
2. Jelsoft vBulletin29
3. vBulletin4
4. vbseo vbseo3
5. vBulletin Vbulletin Forum2
Recent Vulnerabilities
See more →https://reddit.com/r/cybersecurity/comments/1v818wh/new_vbulletin_vulnerability/
unknown
New vBulletin Vulnerability!
7/27/2026🔧 No Patch
CVE-2026-61511
CVSS 9.3critical
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
7/27/2026🔧 No Patch
https://reddit.com/r/netsec/comments/1v7x7i9/cve202661511_vbulletin_621_runmaths_preauth_rce/
unknown
[CVE-2026-61511] vBulletin <= 6.2.1 (runMaths) Pre-Auth RCE Vulnerability
7/27/2026🔧 No Patch
CVE-2026-9357
CVSS 2.0EPSS 0%low
vBulletin Login cross site scripting
5/24/2026🔧 No Patch
CVE-2025-46171
CVSS 5.4medium
7/23/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/hackers-are-exploiting-critical-flaw-in-vbulletin-forum-software/
unknown
Hackers are exploiting critical flaw in vBulletin forum software
5/30/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2025-48828
CVSS 9.0EPSS 11%critical
5/27/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2025-48827
CVSS 10.0EPSS 13%critical
5/27/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2023-39777
CVSS 5.4medium
9/16/2023🔧 No Patch
CVE-2023-25135
CVSS 9.8critical
2/3/2023🔧 No Patch
Monitor vBulletin in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.