Known Vulnerabilities for products from Simplemachines
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Simplemachines".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-26982 json | ** DISPUTED ** SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute arbitrary code by ... | 7.2 - HIGH | 2022-04-05 | 2023-11-07 |
| CVE-2019-12490 json | An issue was discovered in Simple Machines Forum (SMF) before 2.0.16. Reverse tabnabbing can occur because of use of _blank f... | 6.5 - MEDIUM | 2020-01-22 | 2020-08-24 |
| CVE-2019-11574 json | An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and S... | 9.8 - CRITICAL | 2020-03-20 | 2020-03-25 |
| CVE-2018-10305 json | The MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15 does not properly use the pos... | 9.8 - CRITICAL | 2018-04-24 | 2019-10-03 |
| CVE-2016-5727 json | LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute a... | Not Provided | 2017-02-09 | 2025-04-20 |
| CVE-2016-5726 json | Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute a... | Not Provided | 2017-02-09 | 2025-04-20 |
| CVE-2013-7468 json | Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang diction... | 8.1 - HIGH | 2019-03-07 | 2019-03-08 |
| CVE-2013-7467 json | Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter. | 6.1 - MEDIUM | 2019-03-07 | 2019-03-08 |
| CVE-2013-7466 json | Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ d... | 8.8 - HIGH | 2019-03-07 | 2019-03-12 |
| CVE-2013-7236 json | Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode h... | Not Provided | 2014-04-29 | 2026-05-06 |
| CVE-2013-7235 json | Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via mul... | Not Provided | 2014-04-29 | 2026-05-06 |
| CVE-2013-7234 json | Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an... | Not Provided | 2014-04-29 | 2026-05-06 |
| CVE-2013-4465 json | Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1 allow... | Not Provided | 2013-10-25 | 2026-04-29 |
| CVE-2013-4395 json | Simple Machines Forum (SMF) through 2.0.5 has XSS | 6.1 - MEDIUM | 2020-02-12 | 2020-02-21 |
| CVE-2013-0192 json | File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config. | 4.9 - MEDIUM | 2020-02-07 | 2020-02-10 |
| CVE-2011-4173 json | Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1 allows remote attackers to hi... | Not Provided | 2011-10-24 | 2026-04-29 |
| CVE-2011-3615 json | Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) before 1.1.15 and 2.x before 2.0.1 allow remote attacke... | Not Provided | 2011-10-24 | 2026-04-29 |
| CVE-2011-1131 json | The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain ca... | Not Provided | 2011-06-21 | 2026-04-29 |
| CVE-2011-1130 json | Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which migh... | Not Provided | 2011-06-21 | 2026-04-29 |
| CVE-2011-1129 json | Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1... | Not Provided | 2011-06-21 | 2026-04-29 |
Known software with vulnerabilities from Simplemachines
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Simplemachines | Simple Machines Forum | 1.0 |
| Application | Simplemachines | Simple Machine Forum | - |