Known Vulnerabilities for Mybb-2fa by Mybb-2fa Project
Listed below are 1 of the newest known vulnerabilities associated with "Mybb-2fa" by "Mybb-2fa Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-23749 json | Cross-Site Request Forgery (CSRF) vulnerability in progpars.net mybb Last Topics mybb-last-topics allows Stored XSS.This issu... | Not Provided | 2025-01-16 | 2026-04-01 |
| CVE-2021-47905 json | MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field. Atta... | Not Provided | 2026-01-23 | 2026-01-23 |
| CVE-2019-12363 json | An CSRF issue was discovered in the JN-Jones MyBB-2FA plugin through 2014-11-05 for MyBB. An attacker can forge a request to ... | 8.8 - HIGH | 2019-07-11 | 2019-07-17 |
| CVE-2018-25250 json | MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers... | 8.8 - HIGH | 2026-04-04 | 2026-04-06 |
| CVE-2018-25249 json | MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject ... | 8.8 - HIGH | 2026-04-04 | 2026-04-06 |
| CVE-2018-25248 json | MyBB Downloads Plugin 2.0.3 contains a persistent cross-site scripting vulnerability that allows regular members to inject ma... | 8.8 - HIGH | 2026-04-04 | 2026-04-06 |
| CVE-2018-25247 json | MyBB Like Plugin 3.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts by cre... | 8.8 - HIGH | 2026-04-04 | 2026-04-06 |
| CVE-2018-25132 json | MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scrip... | 8.8 - HIGH | 2026-01-23 | 2026-01-23 |
| CVE-2018-25116 json | MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread red... | 8.8 - HIGH | 2026-01-23 | 2026-01-23 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mybb-2fa Project | Mybb-2fa | 2014-11-05 |