Using a "nulled" (pirated) version of an already obsolete software creates a compounded security threat:
vBulletin 4.2.5 vb_unserialize() performance hit - Van Dorp IT Vbulletin 4.2.0 Nulled Free 13
: End-of-Life (EOL). The final version of the 4.x series was 4.2.5, released in 2017. Using a "nulled" (pirated) version of an already
: vBulletin 4.2.0 contains numerous unpatched vulnerabilities, such as: Vbulletin 4.2.0 Nulled Free 13
: Historical flaws in the Forumrunner add-on (often enabled by default) allow unauthenticated remote attackers to execute arbitrary SQL commands.