Why do you think vBulletin communities get hacked often?

I was reading the thread asking if your vB has even been hacked and in there people mention it seems to happen quite often.

It got me thinking... Are they hacked more often because they have a weak security or because they are very popular?
What do you think?

It's probably because there's quite a few flaws, but mostly the forum admins probably have weak passwords? I don't know

Could be from the plugins/hacks too. Happens many times on other forum software as well.

Because Vbulletin forgot security when they made the new version seriously just dont use vbulletin.

People SQL Inject too, its a little un-secure and has quite a few flaws, yes.

Like everyone else has said, too many flaws and it's too well known. It also does not help sometimes when a public announcement is made since then the hackers who might not have known about the flaw could then try and get in because you've not applied the patch yet

Been using VB for a long time now and its never happened to me......people get careless.

I originally switch to VBull from PhpBB because it was constantly getting hacked. They just find exploits and use them.
Vbull is pretty popular which has something to do with it.

If you see most of the hacked versions are either older ones or heavily modded, especially with vbSEO.

To be honest, having been one of those people who has hacked a vBulletin forum in the past, I can say a lot of it is done because they have the opportunity to do so. Fortunately, with age comes maturity. I wised up and actively research security in web applications now. Unfortunately, some people can and will get hold of exploits (mainly found in plugins moreso than vBulletin itself) and will hack the forum just for the sake of hacking it, which I disagree with.

It's probably because of some people using Nulled vBulletin. Who knows what the people who nulled the script put in there. It also can be at the fault of the forum admin. I've seen this happen, and it's a shame, as it takes only two seconds to prevent it.

Just because it's one of the most used scripts. Same with spam. It's not worth targeting unknown platforms, when you can attack something that appears in thousands of installations

it is hacked because of adminitrators.

well there are too many flaws with them, so they get hacked, security is the important function, on which they should think seriously.