XenForo

Category - Message Boards

XenForo is a commercial Internet forum software package written in the PHP programming language.


We have discovered  7,402 live websites   are using XenForo.

Download Lead List
[Download a sample report]


Technology usage statistics

Websites using XenForo:7,402 websites
Most popular in: United States
Market position in Message Boards category:#7
Market share in Message Boards:3.45%
Most popular version:2.2.3

Security vulnerabilites

Top 10 most common security vulnerabilities associated with XenForo
PublishedCVETitleDomains
Jul, 2026CVE-2026-51833Xenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to add...623
Apr, 2026CVE-2026-35055XenForo Cross-Site Scripting via Lightbox in Posts623
Apr, 2026CVE-2026-35056XenForo Remote Code Execution via Authenticated Admin623
Apr, 2026CVE-2026-35057XenForo Stored Cross-Site Scripting via Structured Text Mentions623
Apr, 2026CVE-2024-58342XenForo Open Redirect via getDynamicRedirect392
Jun, 2024CVE-2024-38457Xenforo before 2.2.16 allows CSRF.383
Jun, 2024CVE-2024-38458Xenforo before 2.2.16 allows code injection.383
Feb, 2024CVE-2024-25006XenForo before 2.2.14 allows Directory Traversal (with write access) by an authenticated user who ha...352
Nov, 2021CVE-2021-43032In XenForo through 2.2.7, a threat actor with access to the admin panel can create a new Advertiseme...282
Apr, 2026CVE-2026-35054XenForo Stored Cross-Site Scripting via BB Code Rendering240

Technology adoption

Recent changes in XenForo usage.
Websites that added XenForo 105
Websites that dropped XenForo 92
Websites that changed version of XenForo  58

Available Reports


Technology Information


Major Versions

  • 2.xx (25 subversions, 638 domains)

Website Distribution by Country

Number of websites using XenForo
United States3,842 websites


Russia794 websites
Germany790 websites
GB272 websites
Vietnam245 websites
France216 websites
Turkey163 websites
Singapore123 websites
Netherlands98 websites
Canada73 websites

Website Distribution by TLD

Number of websites using XenForo
.com3,700 websites
.net723 websites
.ru641 websites
.org527 websites
.de332 websites
.co.uk148 websites
.vn104 websites
.info70 websites
.nl60 websites
.it48 websites

XenForo Versions

sorted by popularity
2.2.3136 websites
2.3.4119 websites
2.3.854 websites
2.2.1431 websites
2.3.727 websites
2.1.223 websites
2.2.1322 websites
2.1.820 websites
2.2.1219 websites
2.3.1118 websites

See all XenForo versions ...

Top Websites Using XenForo

A look at the most popular websites built with XenForo
DomainCountryRankContacts
talk.plesk.com United States1,716
xenforo.com GB5,181
forum.directadmin.com United States7,167
websleuths.com United States10,193
psxhax.com United States11,141
linux.org United States12,733
See full domain list

Always Used together


PHP: Total 20,814,350 domains found using PHP
Category - Programming Languages. 23,190,997 domains found using Programming Languages
MySQL: Total 13,362,607 domains found using MySQL
Category - Databases. 13,551,604 domains found using Databases

Alternative Technologies


Discord: Total 64,996 domains found using Discord
bbPress: Total 30,211 domains found using bbPress
phpBB: Total 30,152 domains found using phpBB
BuddyPress: Total 15,039 domains found using BuddyPress
Altervista: Total 10,804 domains found using Altervista
Discuz! X: Total 10,566 domains found using Discuz! X
vBulletin: Total 5,763 domains found using vBulletin
SMF: Total 5,670 domains found using SMF
Discourse: Total 5,444 domains found using Discourse
IPB: Total 5,387 domains found using IPB

FAQ

XenForo falls under the category of Message Boards.
WebTechSurvey systematically indexes websites and their technologies. Users can find websites using XenForo through the WebTechSurvey platform.
There are currently 57,867,524 live websites that use XenForo.
XenForo holds less than 0.1% market share in the Message Boards category.
The main competitors to XenForo include Discord, bbPress, phpBB, and BuddyPress.
XenForo has a known security vulnerabilities: CVE-2026-51833, CVE-2024-58342, CVE-2025-71278, and CVE-2025-71279.