Attackers can exploit the fact that every vb page has a login form without any protection. As such they can keep on brute forcing sites. Hacking software allows attackers to keep changing IP addresses continuously allowing unlimited brute forcing.
A simple solution would be to add a custom...