MMyBB

Products

Exploited and recent CVEs

• CVE-2026-45118 Critical 9.3 MyBB: Contact page reflected XSS 0.5%
• CVE-2026-45117 Critical 9.8 MyBB: Installer database configuration RCE 1.1%
• CVE-2026-45129 Medium 4.6 MyBB: ACP Recovery Codes CSRF 0.2%
• CVE-2026-45124 Medium 4.3 MyBB: Mod CP report resolution missing authorization 0.3%
• CVE-2026-45120 Medium 5.4 MyBB: Insufficient authorization for private calendar events 0.3%
• CVE-2026-47245 Medium 4.3 MyBB: Buddy list corruption 0.4%
• CVE-2026-45734 Medium 5.3 MyBB: Default CAPTCHA missing invalidation 0.6%
• CVE-2026-45125 Medium 5.3 MyBB: Email User CRLF injection 0.4%
• CVE-2026-45122 Medium 4.3 MyBB: Insufficient permission check for calendar event move 0.3%
• CVE-2026-45119 Medium 4.6 MyBB: ACP UTF-8 Conversion CSRF 0.2%
• CVE-2026-45126 Low 3.5 MyBB: ACP Questions state CSRF 0.2%
• CVE-2026-45116 High 8.7 MyBB: Profile field type confusion XSS 0.4%
• CVE-2026-45115 High 8.7 MyBB: Buddy/ignore list username XSS 0.4%
• CVE-2026-45121 Medium 4.3 MyBB: Insufficient permission check for calendar select 0.3%
• CVE-2026-46482 Medium 5.3 MyBB: Security Question insufficient validation 0.4%
• CVE-2026-45123 Medium 4.3 MyBB: IPv6 SSRF 0.4%
• CVE-2026-45128 Low 3.5 MyBB: ACP Users View Manager default CSRF 0.2%
• CVE-2026-45127 Low 3.5 MyBB: ACP Mass Mail draft resend CSRF 0.2%
• CVE-2021-47934 Medium 5.3 MyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRF 0.2%
• CVE-2023-53979 High 8.8 MyBB 1.8.32 Authenticated Remote Code Execution via Chained Vulnerabilities 0.8%
• CVE-2023-53978 Medium 5.4 myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Announcements 0.2%
• CVE-2023-53977 Medium 5.4 myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Management 0.2%
• CVE-2023-53976 Medium 5.4 myBB Forums 1.8.26 Stored Cross-Site Scripting via Template Management 0.2%
• CVE-2025-48941 Medium 5.3 MyBB may disclosure unviewable threads' titles in searches 0.4%
• CVE-2025-48940 High 7.2 MyBB's upgrade component vulnerable to local file inclusion 0.6%
• CVE-2024-23335 Medium 4.7 Backups directory .htaccess deletion in. MyBB 0.6%
• CVE-2024-23336 Medium 5.0 Incomplete disallowed remote addresses list in MyBB 0.5%
• CVE-2023-46251 High 7.5 Visual editor persistent Cross-site Scripting (XSS) in MyBB 0.5%
• CVE-2022-39265 High 7.2 Mail settings' command parameter injection in mybb 3.1%
• CVE-2022-24734 High 7.2 Remote code execution in mybb 77.8%