Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."
https://exchange.xforce.ibmcloud.com/vulnerabilities/84167
http://vanillaforums.org/discussion/23339/security-update-vanilla-2-0-18-7