CVE-2011-1127: Simplemachines Smf

High severity, CVSS 10.0. EPSS: 2.2% chance of exploitation in the next 30 days.

SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.

Affected products

• Simplemachines Smf: up to and including 1.1.12; version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …

Published 2011-06-21. Last modified 2026-06-16.