shouldiuse.io

Categories

VERDICT

XenForo Review

Depends

Should I use XenForo?

Compelling community forum platform - xenforo.com

· 1 month ago

Buy if you run a serious, high-traffic discussion community and can self-host or pay for managed cloud. Skip it if you want free, modern, or zero-maintenance community software.

Confidence

Medium. Based on 25+ public sources: official pricing, CVE databases, community threads, and review sites. No quantitative rating averages found.

Ratings

  • Value for money
  • Ease of useNo usability evidence found
  • Feature depth
  • Support qualityOnly anecdotal community-forum evidence
  • Security posture

Pricing

$195 one-time

Self-hosted license

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierNo
XenForo CloudContact us

Best for

  • Large, long-running discussion communities
  • Hobbyist and enthusiast forums at scale
  • Teams with PHP hosting and admin skills
  • Paid membership-only communities

Not for

  • Casual groups wanting free or cheap
  • Non-technical owners — self-hosting and patching required
  • Anyone wanting modern chat-style community UX
  • Zero-maintenance buyers unwilling to pay cloud prices

Gotchas - check before you buy

high

First-year price isn't total price — renewals, hosting, add-ons stack up

high

Self-hosters must patch promptly — active CVE stream in 2025-2026

medium

Cloud requires sales contact; no public pricing

medium

Leaving is painful enough that users write long migration guides

Pros and cons

Pros

  • Proven at scale — 6,955+ sites run it
  • One-time $195 license instead of recurring SaaS fees
  • Named among best forum software for growing communities
  • Managed cloud option removes self-hosting burden
  • Established add-on ecosystem extends core features

Cons

  • $195 license called 'brazen, overpriced' by users
  • Paid license required even to self-host
  • Cloud pricing hidden behind sales contact
  • Total cost balloons with hosting, add-ons, renewals
  • Some reviewers call it hype over substance

Sources & method

- 12 sources - Multiple CVEs 2024-2026 (RCE, SSRF, auth bypass); self-hosters must patch promptly.

official x3review x4security x2news x3
  • Template system remote code execution (<= 2.2.15), RCE via the template system in versions up to 2.2.15.
  • CVE-2026-51833 — SSRF in 2.3.8, Server-side request forgery vulnerability affecting 2.3.8.
  • CVE-2026-35056, Affects versions before 2.3.9 and before 2.2.19.
  • CVE-2025-71281 — auth bypass, Authentication bypass vulnerability.

Key stats

  • Value for money: 2/5

    Rating

  • $195 one-time

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 2/5. Own users call $195 license overpriced
  • Ease of use. No usability evidence found
  • Feature depth: 4/5. Deep core features, established add-on marketplace
  • Support quality. Only anecdotal community-forum evidence
  • Security posture: 2/5. Multiple recent CVEs including RCE
  • $195 Starting price one-time self-hosted license
  • No Free tier cloud pricing is quote-only
  • 6,955+ Websites using Tomba directory, 2026
  • 0.1% Market share of all websites, w3techs 2026

Pricing

Self-hosted license

$195 one-time

  • Full forum software
  • Hosting and renewals cost extra
  • Add-ons sold separately

XenForo Cloud

Contact us

  • Managed hosting
  • Pricing not public

Security

Multiple CVEs 2024-2026 (RCE, SSRF, auth bypass); self-hosters must patch promptly.

  • Template system remote code execution (<= 2.2.15)RCE via the template system in versions up to 2.2.15.⁹
  • CVE-2026-51833 — SSRF in 2.3.8Server-side request forgery vulnerability affecting 2.3.8.
  • CVE-2026-35056Affects versions before 2.3.9 and before 2.2.19.⁸
  • CVE-2025-71281 — auth bypassAuthentication bypass vulnerability.

What users say

Opinions split: many operators run it happily for years, while a vocal group calls the license overpriced and the modernization pace slow.

“195$ is a brazen, overpriced pricepoint for xenforo”
XenForo community thread
“Xenforo Review: Alot of hype about nothing”
ForumPromotion
“Any news about Xenforo 3.0, can we expect modern forum?”
XenForo community thread

Companies that use it

  • Fractal Audio Systems
  • Sax Bandits
Full analysis

Based on 25+ public sources: official pricing, CVE databases, community threads, and review sites. No quantitative rating averages found.

Battle-tested forum software; great at scale but $195 up front, patch duty, and hosting costs deter casual buyers.

Methodology

Based on 25+ public sources: official pricing, CVE databases, community threads, and review sites. No quantitative rating averages found.

Read how a report is made.

Sources

  1. XenForo — official sitexenforo.com
    official
  2. Self-hosted XenForo licensesxenforo.com
    official
  3. XenForo Cloudxenforo.com
    official
  4. 195$ is a brazen, overpriced pricepointxenforo.com
    review
  5. Total cost for setting up a XenForo forumxenforo.com
    review
  6. Xenforo Review: Alot of hype about nothingforumpromotion.net
    review
  7. XenForo Reviews — G2g2.com
    review
  8. CVE-2026-35056 — NVDnvd.nist.gov
    security
  9. XenForo <= 2.2.15 template RCEkarmainsecurity.com
    security
  10. Best forum software 2026 — Zendeskzendesk.com
    news
  11. Migrated from XenForo to Discoursemeta.discourse.org
    news
  12. Websites using XenForo — Tombatomba.io
    news

Add this review to your site

This check for XenForo says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends XenForo Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.