Vulnerabilities in MyBB

36 results
Vexday analysis

MyBB apresenta 6 vulnerabilidades registradas, predominantemente injeção de código (XSS, CWE-79), sem nenhuma crítica ou sob exploração ativa no momento. O risco permanece contido, mas uma vulnerabilidade foi publicada nos últimos 90 dias, demandando monitoramento de patches recentes.

CVE-2026-45124MEDIUMMyBB: Mod CP report resolution missing authorizationEPSS 0.3%CVE-2026-45120MEDIUMMyBB: Insufficient authorization for private calendar eventsEPSS 0.3%CVE-2018-25309MEDIUMMyBB Recent threads 17.0 Persistent Cross-Site ScriptingEPSS 0.3%CVE-2018-25249MEDIUMMyBB My Arcade Plugin 1.3 Persistent XSS via CommentEPSS 0.3%CVE-2023-53976MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Template ManagementEPSS 0.2%CVE-2023-53977MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Forum ManagementEPSS 0.2%CVE-2023-53978MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Forum AnnouncementsEPSS 0.2%CVE-2021-47934MEDIUMMyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRFEPSS 0.2%CVE-2018-25247MEDIUMMyBB Like Plugin 3.0.0 Cross-Site Scripting via User ProfilesEPSS 0.2%CVE-2018-25248MEDIUMMyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.phpEPSS 0.2%CVE-2018-25250MEDIUMMyBB Last User's Threads in Profile Plugin 1.2 Persistent XSSEPSS 0.2%CVE-2026-45129MEDIUMMyBB: ACP Recovery Codes CSRFEPSS 0.2%CVE-2026-45126LOWMyBB: ACP Questions state CSRFEPSS 0.2%CVE-2026-45128LOWMyBB: ACP Users View Manager default CSRFEPSS 0.2%CVE-2026-45127LOWMyBB: ACP Mass Mail draft resend CSRFEPSS 0.2%CVE-2026-45119MEDIUMMyBB: ACP UTF-8 Conversion CSRFEPSS 0.2%