Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

174 records

Vendor: mybb Clear all filters
TI-2026-32951 CVE-2026-45118

MyBB: Contact page reflected XSS

Priority MEDIUM 43

MyBB is free and open source forum software.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00547 Published 2026-08-18 Fixed in 1.8.40 CWE-83
TI-2026-32962 CVE-2026-45129

MyBB: ACP Recovery Codes CSRF

Priority LOW 20

MyBB is free and open source forum software.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00182 Published 2026-08-18 Fixed in 1.8.40 CWE-352
TI-2026-34829 CVE-2026-47245

MyBB: Buddy list corruption

Priority LOW 20

MyBB is free and open source forum software.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-08-18 Fixed in 1.8.40 CWE-252
TI-2026-32958 CVE-2026-45125

MyBB: Email User CRLF injection

Priority LOW 30

MyBB is free and open source forum software.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00412 Published 2026-08-18 Fixed in 1.8.40 CWE-93
TI-2026-32952 CVE-2026-45119

MyBB: ACP UTF-8 Conversion CSRF

Priority LOW 20

MyBB is free and open source forum software.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00168 Published 2026-08-18 Fixed in 1.8.40 CWE-352
TI-2026-32959 CVE-2026-45126

MyBB: ACP Questions state CSRF

Priority LOW 16

MyBB is free and open source forum software.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00173 Published 2026-08-18 Fixed in 1.8.40 CWE-352
TI-2026-32949 CVE-2026-45116

MyBB: Profile field type confusion XSS

Priority MEDIUM 40

MyBB is free and open source forum software.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.0043 Published 2026-08-18 Fixed in 1.8.40 CWE-79
TI-2026-32948 CVE-2026-45115

MyBB: Buddy/ignore list username XSS

Priority MEDIUM 40

MyBB is free and open source forum software.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00416 Published 2026-08-18 Fixed in 1.8.40 CWE-79
TI-2026-34182 CVE-2026-46482

MyBB: Security Question insufficient validation

Priority LOW 30

### Impact The registration component does not validate the text-based _Security Question_ CAPTCHA correctly, allowing attackers to bypass the challenge via a specially crafted value.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00448 Published 2026-08-18 Fixed in 1.8.40 CWE-636
TI-2026-32956 CVE-2026-45123

MyBB: IPv6 SSRF

Priority LOW 20

MyBB is free and open source forum software.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00367 Published 2026-08-18 Fixed in 1.8.40 CWE-918
TI-2026-32960 CVE-2026-45127

MyBB: ACP Mass Mail draft resend CSRF

Priority LOW 16

MyBB is free and open source forum software.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00173 Published 2026-08-18 Fixed in 1.8.40 CWE-352
TI-2021-22547 CVE-2021-47934 · GHSA-9cv3-xr79-r4jw

MyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRF

Priority HIGH 70

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00232 Published 2026-05-16 No fix listed CWE-79
TI-2018-15534 CVE-2018-25309 · GHSA-gcf4-8qvj-pjm9

MyBB Recent threads 17.0 Persistent Cross-Site Scripting

Priority MEDIUM 62

MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00261 Published 2026-04-29 No fix listed CWE-79
TI-2018-15475 CVE-2018-25250 · GHSA-8grq-4hc4-mrpv

MyBB Last User's Threads in Profile Plugin 1.2 Persistent XSS

Priority MEDIUM 62

MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00209 Published 2026-04-04 No fix listed CWE-79
TI-2018-15474 CVE-2018-25249 · GHSA-4mc8-7jpg-4r7r

MyBB My Arcade Plugin 1.3 Persistent XSS via Comment

Priority MEDIUM 56

MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00264 Published 2026-04-04 No fix listed CWE-79
TI-2018-15473 CVE-2018-25248 · GHSA-8mwv-4frr-pwqr

MyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.php

Priority MEDIUM 56

MyBB Downloads Plugin 2.0.3 contains a persistent cross-site scripting vulnerability that allows regular members to inject malicious scripts through the download title field.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00234 Published 2026-04-04 No fix listed CWE-79
TI-2021-22519 CVE-2021-47905 · GHSA-wj7p-g6rj-6gf9

MyBB Delete Account Plugin 1.4 - Cross-Site Scripting

Priority MEDIUM 56

MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00247 Published 2026-01-23 No fix listed CWE-79
Load more