CVE-2011-3614: Vanillaforums Vanilla

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9.

Affected products

• Vanillaforums Vanilla: before 2.0.17.9 (fixed in 2.0.17.9)

Published 2020-01-22. Last modified 2026-06-16.