There are many vulnerabilities about vBulletin. Waking up in the morning and finding your site defaced, or redirecting to a porn site, or your databases deleted is definately not the start of a good day. After one of my sites faced this, I decided to take a pro-active effort into protecting my vBulletin forums.
I launched a challenge to my users, who are young, smart, techie guys who hack things for fun some times as well as create programs for games. If they found vulnerabilities that I did not, I would pay them.
Even after the finish of a new installation of vBulletin, my users were able to detect some vulnerabilities. In here you’ll find all sorts of ways to secure your vBulletin. Some you knew, and some you overlooked.
How to protect vBulletin 4

