XenForo
Depends
Confidence: Medium
Buy if you run a serious, high-traffic discussion community and can self-host or pay for managed cloud.
New check
Comparison
XenForo and vBulletin both land on Depends.
Buy if you run a serious, high-traffic discussion community and can self-host or pay for managed cloud.
Only existing vBulletin communities with dedicated admins should keep buying it; a vB6 upgrade can beat a risky migration.
| Compare | ||
|---|---|---|
| Verdict | Depends | Depends |
| Best for | Large, long-running discussion communities | Existing vBulletin 4/5 sites upgrading to vB6 |
| Who it's not for | Casual groups wanting free or cheap | New communities starting from scratch |
| Privacy | Multiple CVEs 2024-2026 (RCE, SSRF, auth bypass); self-hosters must patch promptly.⁹ | Poor record: multiple pre-auth RCE CVEs from 2020-2026, several actively exploited with public exploits; no security page found on site. |
| Support quality | Only anecdotal community-forum evidence | Reddit users report unhelpful sales experiences |
| Public sentiment | Opinions split: many operators run it happily for years, while a vocal group calls the license overpriced and the modernization pace slow.⁷ | Long-time admins praise vBulletin's stability, while newer buyers report regret, clunkiness, and sales frustration. |
| Biggest gotcha | First-year price isn't total price . renewals, hosting, add-ons stack up | Self-hosted means you own emergency patching; pre-auth RCEs exploited in the wild |