What’s Vulnerable › Products

SimpleMachines Simple Machines Forum vulnerabilities

20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your SimpleMachines Simple Machines Forum version is affected

Latest SimpleMachines Simple Machines Forum vulnerabilities

• CVE-2025-67163 — (CVSS 6.1)
• CVE-2025-2583 — SimpleMachines SMF ManageNews.php cross site scripting (CVSS 6.1)
• CVE-2025-2582 — SimpleMachines SMF ManageAttachments.php cross site scripting (CVSS 5.4)
• CVE-2024-7438 — SimpleMachines SMF User Alert Read Status index.php resource injection (CVSS 4.3)
• CVE-2024-7437 — SimpleMachines SMF Delete User index.php resource injection (CVSS 4.3)
• CVE-2022-26982 — (CVSS 7.2)
• CVE-2013-4395 — (CVSS 6.1)
• CVE-2013-0192 — (CVSS 4.9)
• CVE-2019-12490 — (CVSS 6.5)
• CVE-2009-5068 — (CVSS 7.2)
• CVE-2013-7468 — (CVSS 8.1)
• CVE-2013-7467 — (CVSS 6.1)
• CVE-2013-7466 — (CVSS 8.8)
• CVE-2018-10305 — (CVSS 9.8)
• CVE-2016-5727 — (CVSS 8.8)
• CVE-2016-5726 — (CVSS 9.8)
• CVE-2013-7236 — (CVSS 7.5)
• CVE-2013-7235 — (CVSS 7.5)
• CVE-2013-7234 — (CVSS 4.3)
• CVE-2013-4465 — (CVSS 4.6)