Two potential issues have been identified in vBulletin 5.3.2 and higher. The first affects the template rendering functionality and could lead to arbitrary file deletion. The second allows the possibility of remote file inclusion via the legacy routing system on Windows servers. We have applied fixes for these issues. It is recommended that you apply this patch as soon as possible. To do so, download the patch for your version from
The Security Patch can be downloaded at
Patches Released:
vBulletin 5.3.4 Patch Level 1
vBulletin 5.3.3 Patch Level 1
vBulletin 5.3.2 Patch Level 2
You must be registered for see links
and upload the files to your server. Overwrite the existing files with the new ones. If you have not upgraded to 5.3.4 yet, it is recommended that you do a full upgrade to vBulletin 5.3.4 Patch Level 1.The Security Patch can be downloaded at
You must be registered for see links
Patches Released:
vBulletin 5.3.4 Patch Level 1
vBulletin 5.3.3 Patch Level 1
vBulletin 5.3.2 Patch Level 2
