Read this blog post about the slew of vBulletin breaches that have recently come to light:
https://www.troyhunt.com/i-just-adde...-i-been-pwned/
Here's the conclusion: "Last thing I'll add to this - stop self-hosting vBulletin! Seriously, pay professionals to do it and that goes for other managed platforms too. You're reading this on a blog served by Ghost Pro and I very happily pay those guys to do it properly for me. The 140 databases above and the dozens of other similar ones in HIBP are from people trying to do this themselves and simply not staying up to date with patches. Don't risk it!"
The current version was released in 2011, although I don't know which patch version we're at. Can the mods set our mind at ease on this score? Are we currently using a hosting service?