Vulnerabilities and security researches formangboard mangboard

Direction: ascending

Jun 06, 2024

Mang Board WP # CVE-2021-26609

CVE, Research URL: CVE-2021-26609
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 26, 2021
Research Description: A vulnerability was found in Mangboard(WordPress plugin). A SQL-Injection vulnerability was found in order_type parameter. The order_type parameter makes a SQL query using unfiltered data. This vulnerability allows a remote attacker to steal user information.
Affected versions: Min 1.0.0, max 1.9.9.
Status: vulnerable

Mang Board WP # CVE-2023-44257

CVE, Research URL: CVE-2023-44257
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 10, 2023
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Hometory Mang Board WP plugin <= 1.7.6 versions.
Affected versions: max 1.8.2.
Status: vulnerable

Mang Board WP # CVE-2024-22306

CVE, Research URL: CVE-2024-22306
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Jan 31, 2024
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hometory Mang Board WP allows Stored XSS.This issue affects Mang Board WP: from n/a through 1.7.7.
Affected versions: max 1.7.8.
Status: vulnerable

Mang Board WP # CVE-2024-30431

CVE, Research URL: CVE-2024-30431
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Mar 29, 2024
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hometory Mang Board WP allows Reflected XSS.This issue affects Mang Board WP: from n/a through 1.8.0.
Affected versions: max 1.8.1.
Status: vulnerable

Jan 08, 2025

Mang Board WP # CVE-2024-56296

CVE, Research URL: CVE-2024-56296
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Jan 07, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP mangboard allows Reflected XSS.This issue affects Mang Board WP: from n/a through <= 1.8.4.
Affected versions: max 1.8.5.
Status: vulnerable

Apr 29, 2025

Mang Board WP # CVE-2025-3435

CVE, Research URL: CVE-2025-3435
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Apr 24, 2025
Research Description: The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_footer parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Affected versions: max 1.8.7.
Status: vulnerable

Jun 14, 2026

Mang Board WP # CVE-2025-12193

CVE, Research URL: CVE-2025-12193
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Nov 08, 2025
Research Description: The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mp' parameter in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 2.3.2.
Status: vulnerable

Jul 10, 2026

Mang Board WP # CVE-2026-13334

CVE, Research URL: CVE-2026-13334
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Jul 09, 2026
Research Description: The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 2.3.5.
Status: vulnerable

Aug 15, 2026

Mang Board WP # CVE-2026-61974

CVE, Research URL: CVE-2026-61974
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Aug 13, 2026
Research Description: Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.
Affected versions: max 2.3.5.
Status: vulnerable

Aug 27, 2026

Mang Board WP # CVE-2026-75977

CVE, Research URL: CVE-2026-75977
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Aug 26, 2026
Research Description: The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. This is due to flawed HMAC generation in the mbw_get_hash_key() function that uses the current user's identity instead of the cookie username parameter when a WordPress user is logged in, combined with insufficient validation in mbw_validate_auth_cookie(). This makes it possible for authenticated attackers, with subscriber-level access and above, to forge administrator authentication cookies and change administrator passwords to achieve complete site takeover.
Affected versions: max 2.3.8.
Status: vulnerable

Sep 04, 2026

Mang Board WP # CVE-2026-84770

CVE, Research URL: CVE-2026-84770
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Sep 02, 2026
Research Description: Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions.
Affected versions: max 2.3.9.
Status: vulnerable

Sep 25, 2026

Mang Board WP # CVE-2026-94176

CVE, Research URL: CVE-2026-94176
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Sep 24, 2026
Research Description: Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions.
Affected versions: max 2.4.2.
Status: vulnerable

Oct 06, 2026

Mang Board WP # CVE-2026-96871

CVE, Research URL: CVE-2026-96871
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 02, 2026
Research Description: The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable on any board configured with the default write_level=0 (guest posting) and editor_type=N settings, which are the out-of-the-box defaults for newly created boards.
Affected versions: max 2.4.3.
Status: vulnerable

Oct 15, 2026

Mang Board WP # CVE-2026-107751

CVE, Research URL: CVE-2026-107751
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 14, 2026
Research Description: The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The save-time sanitizer mbw_htmlspecialchars2() is ineffective against this vector because the exploit payload relies solely on unquoted HTML attribute syntax using only spaces, alphanumerics, and characters such as =, parentheses, and dots — none of which are escaped.
Affected versions: max 2.4.4.
Status: vulnerable

Mang Board WP # CVE-2026-104761

CVE, Research URL: CVE-2026-104761
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 14, 2026
Research Description: The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 2.4.4.
Status: vulnerable

Mang Board WP # CVE-2026-104909

CVE, Research URL: CVE-2026-104909
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 14, 2026
Research Description: The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation is trivial via an unauthenticated POST to any page rendering a public [mb_board] shortcode, as no nonce or capability check is enforced on the shortcode render path; on servers with a standard PHP installation, pearcmd.php can be leveraged to write and then include an attacker-controlled payload file in a single request.
Affected versions: max 2.4.4.
Status: vulnerable

Oct 17, 2026

Mang Board WP # CVE-2026-109512

CVE, Research URL: CVE-2026-109512
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 16, 2026
Research Description: The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The sanitization bypass is further compounded by the ability to omit the data_type parameter in a modify request, which skips the HTMLPurifier branch entirely and leaves only mbw_htmlspecialchars2 encoding — fully reversed at render — as the sole barrier.
Affected versions: max 2.4.5.
Status: vulnerable

Mang Board WP # CVE-2026-109998

CVE, Research URL: CVE-2026-109998
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 16, 2026
Research Description: The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable because the wp_ajax_nopriv_mb_template endpoint is publicly accessible without authentication, nonce verification is not enforced for the content_reply mode, and admin-ajax.php responds with Content-Type: text/html, causing browsers to execute injected tags embedded in the JSON response body.
Affected versions: max 2.4.4.
Status: vulnerable

Mang Board WP # CVE-2026-109219

CVE, Research URL: CVE-2026-109219
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 16, 2026
Research Description: The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.4 via the mbw_file_upload function. This is due to missing file extension validation on the attacker-supplied image_path parameter, whose basename-derived file name bypasses the extension allowlist applied only to the separate file_name parameter. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. Exploitation requires the board to be configured to allow guest posts, which is the plugin's default mode; the required nonce is printed on every public board page, making it readable by any unauthenticated visitor without a WordPress login.
Affected versions: max 2.4.5.
Status: vulnerable

Oct 23, 2026

Mang Board WP # CVE-2026-111834

CVE, Research URL: CVE-2026-111834
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 21, 2026
Research Description: Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4.
Affected versions: max 2.4.5.
Status: vulnerable

Oct 29, 2026

Mang Board WP # CVE-2026-110071

CVE, Research URL: CVE-2026-110071
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 28, 2026
Research Description: The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because the payload contains no angle brackets, wp_kses_post leaves the shortcode intact on save, allowing the malicious attribute value to survive post submission and fire in any viewer's browser — including an administrator previewing a pending post.
Affected versions: max 2.4.6.
Status: vulnerable

Nov 01, 2026

Mang Board WP # CVE-2026-116847

CVE, Research URL: CVE-2026-116847
Home page URL: Security reports for Mang Board WP
Application: Mang Board WP
Date: Oct 31, 2026
Research Description: Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.
Affected versions: max 2.4.7.
Status: vulnerable