can anyone hack my forum without registering? (xss, crsf)
There are quite a few vulnerabilities that have been patched between 1.6.10 and 1.6.16. I would definitely upgrade if you're running a public forum.
thanks i will try to upgrade.
Just for future reference, if software you use is updated, ALWAYS update unless there is a very specific reason to not. New versions are released for a reason. It's not just to be a pain in the lime to forum owners and make them do unnecessary work - the software actually improves.
MyBB 1.6.16 was a security release and so we encourage all the users of the software to upgrade.