Mybb
Mybb · 158 CVEs
MyBB: Contact page reflected XSS
Aug 18, 2026
MyBB: Installer database configuration RCE
Aug 18, 2026
MyBB: ACP Recovery Codes CSRF
Aug 18, 2026
MyBB: Mod CP report resolution missing authorization
Aug 18, 2026
MyBB: Insufficient authorization for private calendar events
Aug 18, 2026
MyBB: Buddy list corruption
Aug 18, 2026
MyBB: Default CAPTCHA missing invalidation
Aug 18, 2026
MyBB: Email User CRLF injection
Aug 18, 2026
MyBB: Insufficient permission check for calendar event move
Aug 18, 2026
MyBB: ACP UTF-8 Conversion CSRF
Aug 18, 2026
MyBB: ACP Questions state CSRF
Aug 18, 2026
MyBB: Profile field type confusion XSS
Aug 18, 2026
MyBB: Buddy/ignore list username XSS
Aug 18, 2026
MyBB: Insufficient permission check for calendar select
Aug 18, 2026
MyBB: Security Question insufficient validation
Aug 18, 2026
MyBB: IPv6 SSRF
Aug 18, 2026
MyBB: ACP Users View Manager default CSRF
Aug 18, 2026
MyBB: ACP Mass Mail draft resend CSRF
Aug 18, 2026
MyBB 1.8.32 Authenticated Remote Code Execution via Chained Vulnerabilities
Dec 22, 2025
myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Announcements
Dec 22, 2025
myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Management
Dec 22, 2025
myBB Forums 1.8.26 Stored Cross-Site Scripting via Template Management
Dec 22, 2025
myBB 1.6.4 Backdoor Arbitrary Command Execution
Aug 13, 2025
MyBB may disclosure unviewable threads' titles in searches
Jun 2, 2025
MyBB's upgrade component vulnerable to local file inclusion
Jun 2, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-45118 | MyBB: Contact page reflected XSS | CRITICAL | 0.55% | Aug 18, 2026 |
| CVE-2026-45117 | MyBB: Installer database configuration RCE | CRITICAL | 1.15% | Aug 18, 2026 |
| CVE-2026-45129 | MyBB: ACP Recovery Codes CSRF | MEDIUM | 0.18% | Aug 18, 2026 |
| CVE-2026-45124 | MyBB: Mod CP report resolution missing authorization | MEDIUM | 0.34% | Aug 18, 2026 |
| CVE-2026-45120 | MyBB: Insufficient authorization for private calendar events | MEDIUM | 0.30% | Aug 18, 2026 |
| CVE-2026-47245 | MyBB: Buddy list corruption | MEDIUM | 0.37% | Aug 18, 2026 |
| CVE-2026-45734 | MyBB: Default CAPTCHA missing invalidation | MEDIUM | 0.55% | Aug 18, 2026 |
| CVE-2026-45125 | MyBB: Email User CRLF injection | MEDIUM | 0.41% | Aug 18, 2026 |
| CVE-2026-45122 | MyBB: Insufficient permission check for calendar event move | MEDIUM | 0.34% | Aug 18, 2026 |
| CVE-2026-45119 | MyBB: ACP UTF-8 Conversion CSRF | MEDIUM | 0.17% | Aug 18, 2026 |
| CVE-2026-45126 | MyBB: ACP Questions state CSRF | LOW | 0.17% | Aug 18, 2026 |
| CVE-2026-45116 | MyBB: Profile field type confusion XSS | HIGH | 0.43% | Aug 18, 2026 |
| CVE-2026-45115 | MyBB: Buddy/ignore list username XSS | HIGH | 0.42% | Aug 18, 2026 |
| CVE-2026-45121 | MyBB: Insufficient permission check for calendar select | MEDIUM | 0.34% | Aug 18, 2026 |
| CVE-2026-46482 | MyBB: Security Question insufficient validation | MEDIUM | 0.45% | Aug 18, 2026 |
| CVE-2026-45123 | MyBB: IPv6 SSRF | MEDIUM | 0.37% | Aug 18, 2026 |
| CVE-2026-45128 | MyBB: ACP Users View Manager default CSRF | LOW | 0.17% | Aug 18, 2026 |
| CVE-2026-45127 | MyBB: ACP Mass Mail draft resend CSRF | LOW | 0.17% | Aug 18, 2026 |
| CVE-2023-53979 | MyBB 1.8.32 Authenticated Remote Code Execution via Chained Vulnerabilities | HIGH | 0.82% | Dec 22, 2025 |
| CVE-2023-53978 | myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Announcements | MEDIUM | 0.24% | Dec 22, 2025 |
| CVE-2023-53977 | myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Management | MEDIUM | 0.24% | Dec 22, 2025 |
| CVE-2023-53976 | myBB Forums 1.8.26 Stored Cross-Site Scripting via Template Management | MEDIUM | 0.24% | Dec 22, 2025 |
| CVE-2011-10018 | myBB 1.6.4 Backdoor Arbitrary Command Execution | CRITICAL | 2.83% | Aug 13, 2025 |
| CVE-2025-48941 | MyBB may disclosure unviewable threads' titles in searches | MEDIUM | 0.34% | Jun 2, 2025 |
| CVE-2025-48940 | MyBB's upgrade component vulnerable to local file inclusion | HIGH | 0.54% | Jun 2, 2025 |
Showing 1 to 25 of 158 CVEs