Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how vbulletin compares to other vendors in security performance

View Risk Score →

New vBulletin Vulnerability!

First published (updated )
Social
reddit

vBulletin vBulletinvBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php

Risk 91
Severity
9.3
Trending
Month
First published (updated )
CVE-2026-61511

[CVE-2026-61511] vBulletin <= 6.2.1 (runMaths) Pre-Auth RCE Vulnerability

First published (updated )
Social
reddit

vBulletin vBulletinvBulletin Login cross site scripting

Risk 15
Severity
2
EPSS
0.28%
First published (updated )
CVE-2026-9357

vBulletin vBulletinvBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoin…

Risk 34
Severity
5.4
First published (updated )
CVE-2025-46171
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

BleepingComputerHackers are exploiting critical flaw in vBulletin forum software

Exploited
Zeroday
First published (updated )
News
BleepingComputer

vBulletin vBulletinCertain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template C…

Risk 84
Severity
9
Exploited
Zeroday
EPSS
10.71%
First published (updated )
CVE-2025-48828

vBulletin vBulletinvBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protect…

Risk 91
Severity
10
Exploited
Zeroday
EPSS
13.27%
First published (updated )
CVE-2025-48827

vBulletin vBulletinXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2023-39777

vBulletin vBulletinvBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a…

Risk 89
Severity
9.8
First published (updated )
CVE-2023-25135
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

vBulletin vBulletinCode Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2020-7373

vBulletin vBulletinXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2020-25115

vBulletin vBulletinXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2020-25116

vBulletin vBulletinXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2020-25117

vBulletin vBulletinXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2020-25118
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

vBulletin vBulletinXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2020-25119

vBulletin vBulletinXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2020-25120

vBulletin vBulletinXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2020-25121

vBulletin vBulletinXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2020-25122

vBulletin vBulletinXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2020-25123
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

vBulletin vBulletinXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2020-25124

vBulletin vBulletinvBulletin PHP Module Remote Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
First published (updated )
CVE-2020-17496

vBulletin vBulletinSQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2020-12720

vBulletin vBulletinSQL Injection

Risk 30
Severity
4.9
First published (updated )
CVE-2019-17271

vBulletin vBulletinInput Validation, Code Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2019-17132
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

vBulletin vBulletinvBulletin before 5.5.4 allows clickjacking.

Risk 22
Severity
4.3
First published (updated )
CVE-2019-17131

vBulletin vBulletinvBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/…

Risk 40
Severity
6.5
First published (updated )
CVE-2019-17130

vBulletin vBulletinvBulletin PHP Module Remote Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
First published (updated )
CVE-2019-16759

vBulletin vBulletinvBulletin 5.4.3 has an Open Redirect.

Risk 38
Severity
6.1
First published (updated )
CVE-2018-15493

vBulletin vBulletinvBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter.

Risk 38
Severity
6.1
First published (updated )
CVE-2018-6200
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203