You either are not active in those communities, or you're wearing some rose tinted glasses.

vBulletin 3, (3.0.x) had a lot of early security issues
phpbb2/3 had a HUGE swath of security issues years back
IP has had their own security issues.
Even XF has had at least one security issue in a non beta release.

Things happen, how you react to them is what is important.

I won't argue that we should take better steps to enforce better security. I know the last thing anyone of the devs want with 5 is an issue they need to work on for security. We hate the issues just as much as you do.

Seems WordPress and Drupal are in on the security conspiracy with vB also. :eek: :p :D

http://mashable.com/2014/08/06/wordp...ml-blowup-dos/

They do like their conspiracies over there. :)

http://xenforo.com/community/threads...ity-fix.80629/
http://xenforo.com/community/threads...ity-fix.80630/

I must be missing your point... borbole said "until now", meaning they finally had one. Your two links point to the same issue, just fixed in two different versions. It's pretty minor anyway considering the fact that you have to be an admin in the first place to exploit them (or already be trusting 3rd party RSS feeds), unlike recent vB issues.

Do you have a vBulletin license? Or are intending to buy one?
If not, this site will not be of any use to you.

Well you've successfully found out how to bump a year old thread..lol

Off to a great start :up: