MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts.
mybb mybb 1.8.14