@johnhiler Thank you , sorry but I hadn’t time to look properly at bbpress .
@_ck_ Be serene , I’m a white hat and infosecwriter . I’m here with my personal data , ua , ip , server and corporation. Really do u see bad intentions? Yes , I need to study 0.9.x sources to confirm a vulnerability and write an exploit ( if possible , code is really good ) , however I’m for full disclosure only after vendors report and fix.
So , don’t be nervous , and thank you for attention and support .
Regards.