vBulletin
Depends
Confidence: Medium
Only existing vBulletin communities with dedicated admins should keep buying it; a vB6 upgrade can beat a risky migration.
New check
Comparison
vBulletin and XenForo both land on Depends.
Only existing vBulletin communities with dedicated admins should keep buying it; a vB6 upgrade can beat a risky migration.
Buy if you run a serious, high-traffic discussion community and can self-host or pay for managed cloud.
| Compare | vBulletin | XenForo |
|---|---|---|
| Verdict | Depends | Depends |
| Best for | Existing vBulletin 4/5 sites upgrading to vB6 | Large, long-running discussion communities |
| Who it's not for | New communities starting from scratch | Casual groups wanting free or cheap |
| Privacy | Poor record: multiple pre-auth RCE CVEs from 2020-2026, several actively exploited with public exploits; no security page found on site.⁹ | Multiple CVEs 2024-2026 (RCE, SSRF, auth bypass); self-hosters must patch promptly. |
| Support quality | Reddit users report unhelpful sales experiences | Only anecdotal community-forum evidence |
| Public sentiment | Long-time admins praise vBulletin's stability, while newer buyers report regret, clunkiness, and sales frustration.⁵ | Opinions split: many operators run it happily for years, while a vocal group calls the license overpriced and the modernization pace slow. |
| Biggest gotcha | Self-hosted means you own emergency patching; pre-auth RCEs exploited in the wild⁹ | First-year price isn't total price . renewals, hosting, add-ons stack up |