SimpleMachines vulnerabilities
7 published CVEs name SimpleMachines among the affected products.
- Published CVEs
- 7
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 5Low 0Not scored 0
CVEs per yearBy the year they were published
- 20242
- 20252
- 20263
Newest CVEs
- CVE-2026-43621
Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load()
SimpleMachines · SMF
High8.6 - CVE-2026-61520
Simple Machines Forum SSRF via image proxy
SimpleMachines · SMF
Medium6.3 - CVE-2026-39903
Simple Machines Forum Authorization Bypass via AttachmentApprove.php
SimpleMachines · SMF
High7.1 - CVE-2025-2583
SimpleMachines SMF ManageNews.php cross site scripting
SimpleMachines · SMF
Medium5.1 - CVE-2025-2582
SimpleMachines SMF ManageAttachments.php cross site scripting
SimpleMachines · SMF
Medium5.1 - CVE-2024-7438
SimpleMachines SMF User Alert Read Status index.php resource injection
SimpleMachines · SMF
Medium5.3 - CVE-2024-7437
SimpleMachines SMF Delete User index.php resource injection
SimpleMachines · SMF
Medium5.3