https://www.theregister.co.uk/2019/09/24/vbulletin_vbug_zeroday/

 

TL;DR every single version of VBulletin 5 is fubared.