MyBB review: free forum software for cheap hosting

MyBB security releases

Version 1.8.41 addresses 24 vulnerabilities, including a high-risk XSS through attachment headers. The previous release fixed 18, three of them high risk, including remote code execution through the installer’s database configuration. Each issue is published with its risk level. An unpatched MyBB forum therefore carries known, public flaws. Upgrades are not always drop-in: 1.8.40 required replacing a list in the config file and adding two lines to global.css. Follow @MyBBSecurity and read the notes before uploading.

MyBB hosting requirements

The 2.22 MB archive installs by upload, with no shell. The minimum is PHP 5.2 with SimpleXML, mbstring and gd, plus MySQL 5.0, MariaDB 5.1, PostgreSQL 8.1 or SQLite 3, on Apache, nginx, lighttpd or IIS. The project still recommends the latest PHP and database versions, and an unsupported PHP has no place on a public forum.

Where MyBB development stands

The stable branch shipped five releases in 2023, one in 2024, one in 2025 and two so far in 2026, all security and maintenance. The 1.9 branch is getting commits in September 2026 but has no release date. The 1.10 branch has seen nothing since January 2018. Install the current stable branch and leave 1.9 out of your plans.

Making a MyBB forum members-only

MyBB does not care about content, and group permissions build a members-only board. Remove “Can view board?” from guests and the whole site closes. Registration offers five methods, including administrator activation, and email verification is the default. Private forums can be hidden, forum jump included. There is no built-in age verification.

Moving an old forum to MyBB

The Merge System, an official tool shipped separately, converts several popular forum packages to MyBB and can combine multiple MyBB forums into one. Test it on a copy first. Community translations and plugins install in a few clicks from the admin panel.

Strengths and limits of MyBB