If you are thinking on using vBulletin, that disclosure timeline should be a big red flag to look at alternatives.<p>Note that exploits are happening in the wild already:
<a href="https://blog.sucuri.net/2015/11/vbulletin-exploits-in-the-wild.html" rel="nofollow">https://blog.sucuri.net/2015/11/vbulletin-exploits-in-the-wi...</a>