SimpleMachines/SMF

GitHub

github.com

www.simplemachines.org

Releases20

Frequency7 months 1 day

Last Release 5 months ago

Stars723

Simple Machines Forum — SMF in short — is free and open-source community forum software, delivering professional grade features in a package that allows you to set up your own online community within minutes!

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-67163 ↗	Dec 18, 2025Thursday, 18 December 2025, 20:16	6.1 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in Simple Machines Forum v2.1.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Forum Name parameter.
CVE-2016-5727 ↗	Feb 9, 2017Thursday, 9 February 2017, 15:59	—	6.8 MEDIUM
LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via vectors related to variables derived from user input in a foreach loop.
CVE-2013-4465 ↗	Oct 25, 2013Friday, 25 October 2013, 23:55	—	4.6 MEDIUM
Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.