Skip to contentSimplemachines Simple Machines Forum vulnerabilities
- simplemachines simple machines forumA stored cross-site scripting (XSS) vulnerability in Simple Machines Forum v2.1.6 allows...CVE-2025-671636.1 Medium
- free5gc smf, simplemachines simple machines forum +1 moreSimpleMachines SMF ManageNews.php cross site scriptingCVE-2025-2583Disputed5.1 Medium
- free5gc smf, simplemachines simple machines forum +1 moreSimpleMachines SMF ManageAttachments.php cross site scriptingCVE-2025-2582Disputed5.1 Medium
- free5gc smf, simplemachines simple machines forum +1 moreSimpleMachines SMF User Alert Read Status index.php resource injectionCVE-2024-74385.3 Medium
- free5gc smf, simplemachines simple machine forum, simple machines forum +2 moreSimpleMachines SMF Delete User index.php resource injectionCVE-2024-74375.3 Medium
- simplemachines simple machines forumSimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute...CVE-2022-26982Public exploitDisputed7.2 High
- free5gc smf, simplemachines simple machines forum +1 moreSimple Machines Forum (SMF) through 2.0.5 has XSSCVE-2013-43956.1 Medium
- free5gc smf, simplemachines simple machines forum +1 moreFile Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the...CVE-2013-0192Public exploit4.9 Medium
- simplemachines simple machines forumAn issue was discovered in Simple Machines Forum (SMF) before 2.0.16. Reverse tabnabbing can...CVE-2019-124906.5 Medium
- free5gc smf, simplemachines simple machines forum +1 moreThere is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions...CVE-2009-5068Public exploit7.2 High
- simplemachines simple machines forumSimple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area...CVE-2013-74688.1 High
- simplemachines simple machines forumSimple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa...CVE-2013-74676.1 Medium
- simplemachines simple machines forumSimple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code...CVE-2013-74668.8 High
- simplemachines simple machines forumThe MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15...CVE-2018-103059.8 Critical
- simplemachines simple machines forumLogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object...CVE-2016-57278.8 High
- simplemachines simple machines forumPackages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object...CVE-2016-57269.8 Critical
- simplemachines simple machines forumSimple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate...CVE-2013-72367.5 High
- simplemachines simple machines forumSimple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to...CVE-2013-72357.5 High
- simplemachines simple machines forumSimple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct...CVE-2013-72344.3 Medium
- simplemachines simple machines forumUnrestricted file upload vulnerability in the avatar upload functionality in Simple Machines...CVE-2013-44654.6 Medium