Skip to content
OpenAdvisories

Vendor

myBB Group

37 known vulnerabilities.

Products

mybb 27 myBB forums 3 MyBB Like Plugin 1 Forum Software 1 MyBB My Arcade Plugin 1 MyBB Timeline Plugin 1 MyBB Downloads Plugin 1 MyBB Last User's Threads in Profile Plugin 1 MyBB Recent threads 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-45126

    MyBB: ACP Questions state CSRF

    MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate the anti-CSRF token correctly, allowing same-site attackers to enable or disable registration challenge questions with a specially crafted U…

    myBB Group mybb
  • Low 3.5
    CVE-2026-45128

    MyBB: ACP Users View Manager default CSRF

    MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. …

    myBB Group mybb
  • Low 3.5
    CVE-2026-45127

    MyBB: ACP Mass Mail draft resend CSRF

    MyBB is free and open source forum software. Prior to 1.8.40, the ACP Mass Mail module does not validate certain requests correctly, allowing same-site attackers to create draft entries from archived entries by embedding a specially crafted URL. The Resend ro…

    myBB Group mybb