[Lazorbeam]

Originally Posted by Adam H

Ive cleaned 5 forums in the past 4 weeks of infection from malware and alike , all of them are from boards of which the admins had not updated their VBSEO when they were told too via mass mail on security releases from VBSEO. They also had all of their plugins out of date and not running latest versions of anything. Also ignoring Qaurentined notices sent from VB.org .

There is only so much a community can do , unfortunately there is no cure for stupidity or " it will never happen to me syndrome"

Its not vbulletins fault that people dont take notice of important mails and it certainly isnt vbulletins fault for a 3rd party plugin which they have no control over.

I understand it can be frustrating but the majority of the cases that i come across on a daily basis are the fault of the site owner or host apart from the rare case which are infected before the 3rd party companies find out about the exploit.

Obviously VBSEO did mess up not long ago which didnt help things, but still its vbseo if anyone you should be preaching to rather than a company that has nothing to do with 3rd party plugins

You're absolutely correct that VBulletin is not at fault. There are plenty of unsafe mods/add-ons out there. I think VBSEO should get special consideration though, since it's one (if not THE) biggest and most popular mod. It's not like you can just turn off the damn thing either.

I wouldn't call the affected forum owners "stupid". 3.6.0 (the latest VBSEO) is vulnerable. Maybe not its latest update, but all I ever ran was 3.6.0 and I was hit. Skilled coders and forum owners are affected as well.