Announcements

We're proud to announce the release of vBulletin 5.1.4. This is a maintenance release focused on resolving issues within the software. All together over 140 issues have been resolved in vBulletin 5.1.4. In addition to fixing outstanding issues, we've added a few features and reworked Site Builder for better stability. Site Builder Refactor Site Builder has been refactored to edit the way it loads components for editing pages. Previously, you could break your page by adding improper HTML to the Static HTML or Ad modules placed on a page. In order to resolve this we had to make some changes to Site Builder. These changes include loading the Site Builder components on demand instead of every page load for administrators. It also involves...

A security issue has been reported to us that affects vBulletin 4. We have released new builds of vBulletin 4.2.2 and 4.2.3 to account for this vulnerability. The issue may allow attackers to access sensitive data via the mobile API. It is recommended that all users update as soon as possible. If you're using a version of vBulletin 4 older than 4.2.2, it is recommended that you upgrade to that version as soon as possible. You can download the build for your version here: http://members.vbulletin.com/ Special thanks to NytroRST for reporting this issue. To install the new build, download your version of vBulletin 4 (4.2.2 or 4.2.3) then upload all files found within the zip file except the /install/ directory. Make sure to overwrite...

A series of security patches have been released for all versions of vBulletin 5 Connect. This includes vBulletin 5.0.0 through 5.1.2. This patch is integrated into vBulletin 5.1.3 Beta 2 as well. The patch is to prevent the accidental exposure of unintended information. We recommend that you upgrade to this latest security patch as soon as possible. If you are not using vBulletin 5.1.2, we recommend that you do a complete upgrade to this version. Please note, all vBulletin cloud sites have already been patched. You can download the patch here: https://members.vbulletin.com/patches.php To install the patch, simply upload the files included in the Patch and overwrite the existing files on your server. There are no scripts that need to...

We're proud to announce the release of vBulletin 5.1.3 Beta 1. This is a maintenance release focused on resolving issues within the software. All together over 175 issues have been resolved in vBulletin 5.1.3 Connect. We've also fixed issues with PHP 5.5.X and PHP 5.6.X in this release. Pagination In addition to the pagination in the floating filter bar, many pages throughout the system have had page navigation added at the bottom of the page. This navigation is in line with the page number based navigation that customers have been asking for. The following locations have been affected: Forums Channel - Topics tab Forums Channel - Latest activity tab Forum Topic Page - Posts tab Forum Topic Page - Latest activity tab Blogs Main -...

An issue has been found in vBulletin 5.1.2 that could make all of your attachments public. We have created a patch for this and updated the download package. This issue only affects users that have already upgraded to 5.1.2. As this patch requires changes to the database, please read the instructions below carefully. Installing the patch Please follow the appropriate steps below. If you download the patch files: Upload the files provided in the patch. Run the database update script provided by entering the URL in your browser. This script is in the /core/install folder. You would run this script from that location. Example: www.example.com/core/install/fixattachpublic.php Delete the /core/install folder when the script has finished...

A security issue has been reported to us that affects the versions of vBulletin listed here: 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.1.0, 5.1.1, and 5.1.2 We have released security patches to account for this vulnerability. The patch resolves a potential Cross-Site Forgery Request in the authorization system. It is recommended that all users install the patch provided for their version as soon as possible. You can download the patch for your version here: http://members.vbulletin.com/patches.php As part of our maintenance of Cloud Sites, we have applied the patch to those sites. If necessary, we will contact Cloud Customers with further information. The current vBulletin 5.1.3 Alpha will include this fix on its next release...

A security issue has been reported to us that affects the versions of vBulletin listed here: 5.0.4, 5.0.5, 5.1.0, 5.1.1, and 5.1.2 We have released security patches to account for this vulnerability. The issue may allow attackers to perform SQL injection attacks on your database. It is recommended that all users update as soon as possible. You can download the patch for your version here: http://members.vbulletin.com/patches.php As part of our maintenance of Cloud Sites, we will apply the patch to them. If necessary, we will contact Cloud Customers with further information. The current vBulletin 5.1.3 Alpha will include this fix on its next release. vBulletin 5.1.3 Alpha should not considered suitable for production or live servers.