Skip to content
OpenAdvisories

Vendor

myBB Group

37 known vulnerabilities.

Products

mybb 27 myBB forums 3 MyBB Like Plugin 1 Forum Software 1 MyBB My Arcade Plugin 1 MyBB Timeline Plugin 1 MyBB Downloads Plugin 1 MyBB Last User's Threads in Profile Plugin 1 MyBB Recent threads 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-45118

    MyBB: Contact page reflected XSS

    MyBB is free and open source forum software. Prior to 1.8.40, the Contact module does not validate a redirect URL or protocol correctly, resulting in an open redirect and reflected JavaScript code injection. contact.php accepts the redirect target from the fr…

    myBB Group mybb
  • Critical 9.8
    CVE-2026-45117

    MyBB: Installer database configuration RCE

    MyBB is free and open source forum software. From 1.8.13 until 1.8.40, the installer module does not properly escape user-supplied database configuration values written to the configuration file, resulting in PHP code injection and remote code execution when …

    myBB Group mybb
  • Critical 10.0
    CVE-2011-10018 Public exploit

    myBB 1.6.4 Backdoor Arbitrary Command Execution

    myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execute arbitrary PHP code by injecting payloads into a specially crafted collapsed cookie. This vulnerability was introduce…

    myBB Group Forum Software