Using "nulled" software—commercial software that has had its licensing and "call-home" security features illegally removed—is a major security risk. While version 4.1.3 of vBulletin is now legacy, the "nulled" versions found on free download sites are frequently weaponized by the very people who cracked them.