vBulletin 4.x goes further down hill

[RainMotorsports]

Mind as well call vB 4.2.x end of life I mean its development life has been over for months but plenty of large sites still run 3.8 such as xda-developers and hell vBulletins own mod site is still on 3.6.

January 3rd this vulnerability was announced:

It has come to our attention that there is a security issue in the uploader.swf file included as part of the Yahoo User Interface (YUI) library included in vBulletin 4. As the version of YUI included in vBulletin is end-of-lifed, Yahoo will not be fixing this issue.

Note: We will not be fixing the vulnerability in the SWF file directly nor do we plan to take any other action on this issue at this time.

Last 3 vulnerabilities for vB 4 have required fixes consisting of deleting files and forgetting you ever had them...

PHP 5.3 is end of life so they released vB 4.2.2 to support 5.4 which our provider switched to right after we switched to Xenforo. Looks like in a few years it will be pretty hard to not convert off vBulletin.