Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

20 records

Vendor: kitae-park Clear all filters
TI-2026-81747 CVE-2026-110071 · GHSA-xwvq-x37m-5r2p

Stored cross-site scripting in Mang Board plugin via align attribute

Priority LOW 28

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00201 Published 2026-10-28 No fix listed CWE-79
TI-2026-78799 CVE-2026-111834 · GHSA-w892-rc7v-qpx5

Unrestricted file upload in WordPress Mang Board WP plugin

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00372 Published 2026-10-21 No fix listed CWE-434
TI-2026-75172 CVE-2026-109998 · GHSA-whj8-6p7v-qjm7

Stored cross-site scripting in Mang Board plugin for WordPress

Priority LOW 31

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00272 Published 2026-10-16 No fix listed CWE-79
TI-2026-75170 CVE-2026-109512 · GHSA-4r22-fcjv-33cr

Stored cross-site scripting in Mang Board plugin for WordPress

Priority LOW 28

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00209 Published 2026-10-16 No fix listed CWE-79
TI-2026-74749 CVE-2026-109698

SQL injection in Mang Board WP WordPress plugin

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Board WP mangboard allows SQL Injection.This issue affects Mang Board WP: from n/a through 2.4.4.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00283 Published 2026-10-15 No fix listed CWE-89
TI-2026-74620 CVE-2026-88043 · GHSA-mgxx-8mqr-7h76

Stored cross-site scripting in Mang Board WP WordPress plugin

Priority LOW 37

The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.0019 Published 2026-10-15 No fix listed CWE-79
TI-2026-73824 CVE-2026-104909 · GHSA-46h5-mprp-vjcc

Local file inclusion in Mang Board WordPress plugin

Priority LOW 39

The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01007 Published 2026-10-14 No fix listed CWE-98
TI-2026-73851 CVE-2026-107751 · GHSA-w243-5v48-g4m5

Stored cross-site scripting in Mang Board WordPress plugin

Priority LOW 38

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00322 Published 2026-10-14 No fix listed CWE-79
TI-2026-73820 CVE-2026-104761 · GHSA-gcx3-c862-9q9f

Stored cross-site scripting in Mang Board WordPress plugin

Priority LOW 28

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00298 Published 2026-10-14 No fix listed CWE-79
TI-2026-11297 CVE-2026-13334 · GHSA-pm92-5rp3-r8mg

Mang Board WP <= 2.3.4 - Reflected Cross-Site Scripting via 'stag' Parameter

Priority LOW 27

The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0038 Published 2026-07-09 No fix listed CWE-79
TI-2025-11179 CVE-2025-12193 · GHSA-vxvr-5342-6g7x

Mang Board WP <= 2.3.1 - Reflected Cross-Site Scripting

Priority LOW 27

The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mp' parameter in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0022 Published 2025-11-08 No fix listed CWE-79
TI-2025-03018 CVE-2025-3435 · GHSA-w48v-4mqc-9p3w

MangBoard WP <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer

Priority LOW 20

The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_footer parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00237 Published 2025-04-24 No fix listed CWE-79