Security and Bug Fix Patches for vBulletin 5.x

[vB.Org System]

For vBulletin 5.x.x

This security update will help you prevent attacks through the Mobile API.

For vBulletin 5.1.4 only, the critical bug fixes address issues with the vBulletin 5 upgrade system, and two separate issues with site builder. The bug fix issues are as follows:

• VBV-13932 Some Javascript was breaking the ability for site builder to initialize.
• VBV-13926 The “Create New Page” feature does not set a default layout
• VBV-13960 Customers Upgrading from earlier versions of vBulletin may have a broken settings page.

You can download the build for your version here: https://members.vbulletin.com/ and the patch can be found here: https://members.vbulletin.com/patches.php

To install the patch, download it then upload all included files found within the zip file. Make sure to overwrite the existing files on your server.

If you're using a version prior to 5.1.4, then you should follow standard upgrade procedures.

It is recommended that all users update as soon as possible. If you're using a version of vBulletin 5 older than 5.1.4, it is recommended that you upgrade to that version as soon as possible.

Customers on vBulletin Cloud do not need to take any action. These fixes have already been rolled out.

If you have already upgraded prior to this announcement and are affected by VBV-13960, please open a support ticket so we may help you address the issue.