Vb 4.2.3 users passwords stolen

[hollyboy]

I have been reported some of my users had their password stolen and used by a hacker to post shitty topics on the forum

What can I do to avoid that?

[Dave]

Were their passwords stolen because of a vulnerability on your forums or from somewhere else?
You first have to find the hole, then patch it, then you should consider resetting the passwords of all users.

[hollyboy]

Well that I don't know.
Seems like the passwords stolen were quite easy to guess

[Dave]

Well you will have to find out if it's because of an exploit on your forums or not.
That way we can guide you the right way.

[hollyboy]

Well you will have to find out if it's because of an exploit on your forums or not.
That way we can guide you the right way.

How can I find out?
Anyway I have reset the password not secure (540)

[Dave]

Well if the "hacker" didn't tell you that he hacked your forums and extracted user information, the only way would be by looking at the server logs, suspicious hooks or outdated vulnerable plugins.
There's not really a way to tell you exactly where to look at since each hack is unique.

[Max Taxable]

AdminCP>Users>Check Vulnerable passwords

[hollyboy]

AdminCP>Users>Check Vulnerable passwords

yes did that tks

[hollyboy]

How can I change the password to all the users and send it to their email?

[SᴩiDᴇЯ]

It sounds like you may need some help in this matter, if you want some help PM me and we can have a chat.