Never run an outdated version. Set your config.php to notify you of new patches. As of 2025, XenForo 2.2.x and 2.3.x lines are secure, but only if you apply security patches as soon as they are released (usually on Tuesdays).

Ensure the version of the "Paper" style matches your XenForo installation (e.g., XenForo 2.2 vs. 2.3). Check Community Archives:

Statewins emerged as a successor to other "leak" sites, gaining notoriety around the mid-2010s. Its stated purpose was to aggregate "state wins"—a crude term for leaked databases containing personal information from government, corporate, and private sources. The forum operated on a simple premise: users would upload "combo lists" (usernames and passwords), credit card dumps, Social Security numbers, and fullz (complete identity packages). Unlike the dark web, Statewins operated on the clearnet, relying on domain hopping to evade law enforcement.

: A custom plugin used for tracking "states" or "wins" within a specific community.

If this is a specific plugin from a third-party marketplace like XenForo.com