MyBB 1.8.20
code 1820
SecurityMaintenance
Full Package
Install a new MyBB forum or upgrade from older versions.
.zip – 2.15 MB
Download from MyBB.com Download from GitHubsha512:
68d5bcd26cf808bf90414e569cfee91e6ad158ee73cdb8ce7dc3a87a0b883b946674831b4fbbd9c6c81b25c20f802e8f6e303f128aeb5607f40c39b294a8d5e2
sha256:
ee96b3eac55ebbbdf86c2057d513c7b015a6d558c7fdf4f297084c3e2f73b212
sha1:
e3c73a4cf99dbb237c9aa8bce458fe2296acbdee
md5:
3d1a8c22874af72a1025709f5447f783
Changed Files
Upgrade from the previous version.
.zip – 0.85 MB
Download from MyBB.com Download from GitHubsha512:
b2446331cc8b62fea579acb7e225344d23347d0e5fa9f3a49df8715aa31a14a29b38b1757f5f11d42983bd07fb59be4ac9b7ae09e6151b9a8f0a445bbb4566ec
sha256:
31b21c008d63f655f80572fffd8d7c1c465c346580cf920a1535443893766cb7
sha1:
80c0af41e9148bc84ef7558d6f20d9c859279c9a
md5:
d9377988fdef5e19d105afe7db141543
Important Notes
Running the upgrade script is required.
Before performing any upgrade please remember to backup your forum’s files and database and store them safely. If you have edited core files, including language files, please make sure you make a changelog for these changes so you can make them again (if necessary) once the upgrade is complete.
Follow the Upgrade Documentation for more detailed instructions.
Security Vulnerabilities Addressed (5)
Reset Password reflected XSS
ModCP Profile Editor username reflected XSS
Reported by Jovan Zivanovic MaTRIS Research Group, SBA Research
Predictable CSRF token for guest users
Reported by Devilshakerz MyBB Team
Reset Password username enumeration via email
Reported by Abdullah Md. Shaleh
Issues Resolved (42)
View issues on GitHubChanged Files ()
Changed Language Files (9)
There are changes to 9 language file(s). Changed languages files can be cross-referenced from the list above.Changed Templates (47)
announcementcodebuttonseditpostfooterfooter_showteamlinkforumdisplayforumdisplay_threadlistforumdisplay_threadlist_subscriptionglobal_modqueueglobal_modqueue_noticeglobal_unreadreportsheaderheaderincludeindex_boardstatsmember_no_referralsmember_profilemember_profile_modoptions_managebanmember_profile_modoptions_manageusermember_profile_referralsmember_referral_rowmember_referralsmember_referrals_linkmember_referrals_popupmember_resendactivationmember_resetpasswordmemberlistmemberlist_searchmodalmodal_buttonmodcp_announcements_editmodcp_announcements_newmodcp_modqueue_postsmodcp_modqueue_threadsnewreplynewthreadpost_attachments_attachmentpost_javascriptprivateprivate_orderarrowprivate_readprivate_sendreputationsearchshowthreadusercp_editlistsusercp_forumsubscriptions_forumwarnings_warn_pm
This release includes allowing users to see their unapproved content and view user referrals; compatibility with PHP >= 7.2 has been improved and jQuery has been upgraded to 3.0.0, which might affect custom JavaScript code in plugins and themes.