Information Disclosure

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive…CVE-2016-10073Vanillaforums · 84% likely

   CWE-200

2. Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrate…CVE-2011-3812Vanillaforums · 1.2% likely

   CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.