All three of those sites are actually on the same server, probably run by the same people (I recall that Dashhacks was sold off to the QJ guys, which prompted many to leave).
But vB should be hashing passwords, so it's unlikely they'll get yours, unless it's rather weak.

The QJ team are generally more interested in making money than running a good site.  I'm not surprised that they don't bother to keep up with security updates...

Thanks for the heads up though.

Thanks for the heads up