Simplemachines

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 34
    Known Exploited: 0
    5
    Critical Level Threats
    14
    High Level Threats
    12
    Medium Level Threats
    3
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-43621

    Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load()

    Last Modified: Aug 28, 2026
    Published: Aug 26, 2026

    CVE-2026-61520

    Simple Machines Forum SSRF via image proxy

    Last Modified: Jul 28, 2026
    Published: Jul 14, 2026

    CVE-2026-39903

    Simple Machines Forum Authorization Bypass via AttachmentApprove.php

    Last Modified: Jul 28, 2026
    Published: Jul 10, 2026

    CVE-2025-67163

    A stored cross-site scripting (XSS) vulnerability in Simple Machines Forum v2.1.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Forum Name parameter.

    Last Modified: Dec 31, 2025
    Published: Dec 18, 2025

    CVE-2025-2583

    SimpleMachines SMF ManageNews.php cross site scripting

    Last Modified: Apr 21, 2025
    Published: Mar 21, 2025
    Items Per Page
    Simplemachines Vulnerabilities & Security CVEs | CVE-DB