It does work with Vbulletin 3.7. As far as me diagnosing your problem, I need a little more information than "It doesn't work for 3.7".
There are no known vulnerabilities with this plugin. Check your logs to see when it happens, otherwise I would suggest you deactivate all plugins and see if the hacking continues. Then one by one turn them on until you get hacked again.