CVE-2018-7305: Mybb

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts.

Affected products

• Mybb Mybb: version 1.8.14 only

Published 2018-02-21. Last modified 2026-06-17.