What’s Vulnerable › Products

SimpleMachines SMF vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your SimpleMachines SMF version is affected

Latest SimpleMachines SMF vulnerabilities

• CVE-2026-43621 — Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load() (CVSS 8.1)
• CVE-2026-61520 — Simple Machines Forum SSRF via image proxy (CVSS 7.7)
• CVE-2026-39903 — Simple Machines Forum Authorization Bypass via AttachmentApprove.php (CVSS 7.1)
• CVE-2011-4173 — (CVSS 6.8)
• CVE-2011-3615 — (CVSS 7.5)
• CVE-2011-1131 — (CVSS 5.0)
• CVE-2011-1130 — (CVSS 7.5)
• CVE-2011-1129 — (CVSS 3.5)
• CVE-2011-1128 — (CVSS 7.5)
• CVE-2011-1127 — (CVSS 10.0)
• CVE-2008-6971 — (CVSS 7.5)
• CVE-2006-4564 — (CVSS 5.1)