204 matches found
CVE-2026-116847
Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.4.6 versions...
CVE-2026-116847 WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.4.6 versions...
EUVD-2026-114307
Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.4.6 versions...
CVE-2026-116847 WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.4.6 versions...
CVE-2026-116847
The Mang Board WP plugin for WordPress versions
WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by John Ryan Albon in WordPress Plugin Mang Board WP versions = 2.4.6...
PT-2026-133757
Name of the Vulnerable Software and Affected Versions Mang Board WP versions 2.4.6 and earlier Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendatio...
CVE-2026-116847: Kitae Park Mang Board WP: Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.
Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.4.6 versions...
CVE-2026-110071
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...
EUVD-2026-111600
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...
CVE-2026-110071 Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...
CVE-2026-110071 Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...
CVE-2026-110071
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.4.5 . The root cause is insufficient input sanitization and output escaping specifically related to the 'align' shortcode attribute. An authenticated attacker with contributor-...
PT-2026-127872
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...
CVE-2026-110071: kitae-park Mang Board: The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all…
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and...
WordPress Mang Board cross-site scripting vulnerability
WordPress Mang Board versions 2.4.5 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping for the align parameter, potentially enabling stored cross-site scripting attacks. Authenticated attackers with contributor or...
WordPress Mang Board plugin <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Mang Board WP versions = 2.4.5...
CVE-2026-111834
Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4...
CVE-2026-111834 WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4...
EUVD-2026-107281
Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4...