This is also very reassuring. Oh well, if it wasn't be vBulletin, it would be some other forum software that would be hacked. None is immune, apparently.
Speaking of vBulletin exploits, OpenSUSE forums (which run vBullentin 4.2.1 - the same as here) was broken into...
http://linux.slashdot.org/story/14/01/08/1656231/opensuse-forums-defaced-email-addresses-leaked
FYI