Simplemachines vulnerabilities

Products

• Simple Machines Forum 20
• Smf 16
• Simple Machine Forum 3

Newest

• free5gc smf Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load() CVE-2026-43621 Public exploit 8.6 HighAugust 26, 2026
• free5gc smf Simple Machines Forum SSRF via image proxy CVE-2026-61520 6.3 MediumJuly 14, 2026
• free5gc smf Simple Machines Forum Authorization Bypass via AttachmentApprove.php CVE-2026-39903 7.1 HighJuly 10, 2026
• simplemachines simple machines forum A stored cross-site scripting (XSS) vulnerability in Simple Machines Forum v2.1.6 allows... CVE-2025-67163 6.1 MediumDecember 18, 2025
• free5gc smf, simplemachines simple machines forum +1 more SimpleMachines SMF ManageNews.php cross site scripting CVE-2025-2583 Disputed 5.1 MediumMarch 21, 2025
• free5gc smf, simplemachines simple machines forum +1 more SimpleMachines SMF ManageAttachments.php cross site scripting CVE-2025-2582 Disputed 5.1 MediumMarch 21, 2025
• free5gc smf, simplemachines simple machines forum +1 more SimpleMachines SMF User Alert Read Status index.php resource injection CVE-2024-7438 5.3 MediumAugust 3, 2024
• free5gc smf, simplemachines simple machine forum, simple machines forum +2 more SimpleMachines SMF Delete User index.php resource injection CVE-2024-7437 5.3 MediumAugust 3, 2024
• simplemachines simple machines forum SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute... CVE-2022-26982 Public exploitDisputed 7.2 HighApril 5, 2022
• simplemachines simple machine forum An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF... CVE-2019-11574 9.8 CriticalMarch 20, 2020
• free5gc smf, simplemachines simple machines forum +1 more Simple Machines Forum (SMF) through 2.0.5 has XSS CVE-2013-4395 6.1 MediumFebruary 12, 2020
• free5gc smf, simplemachines simple machines forum +1 more File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the... CVE-2013-0192 Public exploit 4.9 MediumFebruary 7, 2020
• simplemachines simple machines forum An issue was discovered in Simple Machines Forum (SMF) before 2.0.16. Reverse tabnabbing can... CVE-2019-12490 6.5 MediumJanuary 22, 2020
• free5gc smf, simplemachines simple machines forum +1 more There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions... CVE-2009-5068 Public exploit 7.2 HighJanuary 15, 2020
• simple machine forum machine forum, simplemachines simple machine forum +1 more Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that... CVE-2005-4891 Public exploit 9.8 CriticalJanuary 15, 2020
• simplemachines simple machines forum Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area... CVE-2013-7468 8.1 HighMarch 7, 2019
• simplemachines simple machines forum Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa... CVE-2013-7467 6.1 MediumMarch 7, 2019
• simplemachines simple machines forum Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code... CVE-2013-7466 8.8 HighMarch 7, 2019
• simplemachines simple machines forum The MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15... CVE-2018-10305 9.8 CriticalApril 24, 2018
• simplemachines simple machines forum LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object... CVE-2016-5727 8.8 HighFebruary 9, 2017
• simplemachines simple machines forum Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object... CVE-2016-5726 9.8 CriticalFebruary 9, 2017
• simplemachines simple machines forum Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate... CVE-2013-7236 7.5 HighApril 29, 2014
• simplemachines simple machines forum Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to... CVE-2013-7235 7.5 HighApril 29, 2014
• simplemachines simple machines forum Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct... CVE-2013-7234 4.3 MediumApril 29, 2014
• simplemachines simple machines forum Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines... CVE-2013-4465 4.6 MediumOctober 25, 2013
• simplemachines smf Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1... CVE-2011-4173 6.8 MediumOctober 24, 2011
• simplemachines smf Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) before 1.1.15 and 2.x... CVE-2011-3615 7.5 HighOctober 24, 2011
• simplemachines smf The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x... CVE-2011-1131 5.0 MediumJune 21, 2011
• simplemachines smf Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the... CVE-2011-1130 7.5 HighJune 21, 2011
• simplemachines smf Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple... CVE-2011-1129 3.5 LowJune 21, 2011
• simplemachines smf The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x... CVE-2011-1128 7.5 HighJune 21, 2011
• simplemachines smf SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly... CVE-2011-1127 10.0 HighJune 21, 2011
• simplemachines smf The password reset functionality in Simple Machines Forum (SMF) 1.0.x before 1.0.14, 1.1.x before... CVE-2008-6971 Public exploit 7.5 HighAugust 13, 2009
• simplemachines smf SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows... CVE-2006-4564 5.1 MediumSeptember 6, 2006