CVE-2011-1131: Simplemachines Smf

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created, which might allow remote attackers to obtain sensitive information via a search.

Affected products

• Simplemachines Smf: up to and including 1.1.12; version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …

Published 2011-06-21. Last modified 2026-06-16.