On this - quite often it's due to underlying security bugs, and not just the direct software (e.g. the forum bulletining board software, which is probably still a combination of PHP (which has it's own versions and fixes), one or more databases like MySQL, Postgres, Oracle, SQL Server .... with...