CVE-2026-116847 | High | 7.1 | 2026-10-30 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions. |
CVE-2026-110071 | Medium | 6.4 | 2026-10-28 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to i… |
CVE-2026-111834 | Critical | 9.9 | 2026-10-21 | Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affect… |
CVE-2026-109998 | High | 7.2 | 2026-10-16 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to… |
CVE-2026-109512 | Medium | 6.4 | 2026-10-16 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.4 due to… |
CVE-2026-109219 | Critical | 9.8 | 2026-10-16 | The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in version 2.4.4 via the mbw_file_upload function. This is due to missing file exten… |
CVE-2026-109698 | Critical | 9.3 | 2026-10-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Board WP mangboard allows SQL Injection.T… |
CVE-2026-88043 | High | 7.2 | 2026-10-15 | The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.0 d… |
CVE-2026-107751 | High | 7.2 | 2026-10-14 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due… |
CVE-2026-104909 | High | 8.1 | 2026-10-14 | The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' par… |
CVE-2026-104761 | Medium | 6.4 | 2026-10-14 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to… |
CVE-2026-96871 | High | 7.2 | 2026-10-02 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.2 due… |
CVE-2026-94176 | High | 7.1 | 2026-09-23 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions. |
CVE-2026-84770 | High | 8.8 | 2026-09-02 | Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions. |
CVE-2026-75977 | High | 8.8 | 2026-08-26 | The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. Th… |
CVE-2026-61974 | High | 7.1 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions. |
CVE-2026-13334 | Medium | 6.1 | 2026-07-09 | The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all versions up to, and including, 2.3.4 due… |
CVE-2025-12193 | Medium | 6.1 | 2025-11-08 | The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mp' parameter in all versions up to, and including, 2.3.1 due t… |
CVE-2025-3435 | Medium | 4.4 | 2025-04-24 | The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_footer parameters in all versions up to, and… |
CVE-2024-56296 | High | 7.1 | 2025-01-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP mangboard allows Reflected XSS.T… |