Layerbb · weakness class

Cross-Site Request Forgery

3 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/.CVE-2018-17996Layerbb · 3.0% likely
CWE-352
LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php.CVE-2019-16531Layerbb · 2.5% likely
CWE-352
LayerBB 1.1.3 allows conversations.php/cmd/new CSRF.CVE-2019-13974Layerbb · 0.6% likely
CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.