CVE-2013-7236: Simplemachines Simple Machines Forum

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.

Affected products

• Simplemachines Simple Machines Forum: up to and including 1.1.9; version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …

Published 2014-04-29. Last modified 2026-06-17.