On one of my forums, it seems that a certain someone can get into anyone's account at any point in time and post on it. It's not a password problem, because everyone has already secured their passwords and he's still able to do it. It's vBulletin version 3.6.5. I don't know if this is important or not, but I really don't think he can do much else besides post because that's the only thing being done. No PMs, no PW changes, account changes, etc. Just posts.