vBulletin itself alone is very secure. It's just the modifications that make a board vulnerable.
Modifications just add more points of attack....if modifications are coded correctly they are just as secure as anything else. Bugs are going to happen even when things are done correctly, just a fact of life.