SSimpleMachines

Products

Exploited and recent CVEs

• CVE-2026-43621 High 8.1 Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load() 0.4%
• CVE-2026-61520 High 7.7 Simple Machines Forum SSRF via image proxy 0.4%
• CVE-2026-39903 High 7.1 Simple Machines Forum Authorization Bypass via AttachmentApprove.php 0.5%
• CVE-2025-2583 Low 3.5 SimpleMachines SMF ManageNews.php cross site scripting 0.4%
• CVE-2025-2582 Low 3.5 SimpleMachines SMF ManageAttachments.php cross site scripting 0.4%
• CVE-2024-7438 Medium 4.3 SimpleMachines SMF User Alert Read Status index.php resource injection 0.5%
• CVE-2024-7437 Medium 5.4 SimpleMachines SMF Delete User index.php resource injection 0.4%