Simplemachines Smf vulnerabilities

• free5gc smf Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load() CVE-2026-43621 Public exploit 8.6 HighAugust 26, 2026
• free5gc smf Simple Machines Forum SSRF via image proxy CVE-2026-61520 6.3 MediumJuly 14, 2026
• free5gc smf Simple Machines Forum Authorization Bypass via AttachmentApprove.php CVE-2026-39903 7.1 HighJuly 10, 2026
• free5gc smf, simplemachines simple machines forum +1 more SimpleMachines SMF ManageNews.php cross site scripting CVE-2025-2583 Disputed 5.1 MediumMarch 21, 2025
• free5gc smf, simplemachines simple machines forum +1 more SimpleMachines SMF ManageAttachments.php cross site scripting CVE-2025-2582 Disputed 5.1 MediumMarch 21, 2025
• free5gc smf, simplemachines simple machines forum +1 more SimpleMachines SMF User Alert Read Status index.php resource injection CVE-2024-7438 5.3 MediumAugust 3, 2024
• free5gc smf, simplemachines simple machine forum, simple machines forum +2 more SimpleMachines SMF Delete User index.php resource injection CVE-2024-7437 5.3 MediumAugust 3, 2024
• simplemachines smf Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1... CVE-2011-4173 6.8 MediumOctober 24, 2011
• simplemachines smf Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) before 1.1.15 and 2.x... CVE-2011-3615 7.5 HighOctober 24, 2011
• simplemachines smf The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x... CVE-2011-1131 5.0 MediumJune 21, 2011
• simplemachines smf Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the... CVE-2011-1130 7.5 HighJune 21, 2011
• simplemachines smf Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple... CVE-2011-1129 3.5 LowJune 21, 2011
• simplemachines smf The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x... CVE-2011-1128 7.5 HighJune 21, 2011
• simplemachines smf SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly... CVE-2011-1127 10.0 HighJune 21, 2011
• simplemachines smf The password reset functionality in Simple Machines Forum (SMF) 1.0.x before 1.0.14, 1.1.x before... CVE-2008-6971 Public exploit 7.5 HighAugust 13, 2009
• simplemachines smf SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows... CVE-2006-4564 5.1 MediumSeptember 6, 2006