CVE-2026-75977

The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. This is due to flawed HMAC generation in the mbwgethashkey function that uses the current user's identity instead of the cookie username...

WordPress Mang Board WP plugin <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie vulnerability

Authenticated Subscriber+ Privilege Escalation to Forged Authentication Cookie vulnerability discovered by daroo in WordPress Plugin Mang Board WP versions = 2.3.7...

CVE-2026-75977 Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie

The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. This is due to flawed HMAC generation in the mbwgethashkey function that uses the current user's identity instead of the cookie username...

EUVD-2026-66335

The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. This is due to flawed HMAC generation in the mbwgethashkey function that uses the current user's identity instead of the cookie username...

CVE-2026-75977

Mang Board WP WordPress plugin (all versions ≤ 2.3.7 ) suffers from a Missing Authorization vulnerability via authentication cookie forgery. The root cause is flawed HMAC generation in mbw_get_hash_key(), which uses the current user's identity instead of the cookie's username parameter when a Wor...

CVE-2026-61974

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...

EUVD-2026-57974

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...

CVE-2026-61974

CVE-2026-61974 is an Unauthenticated Cross Site Scripting (XSS) vulnerability affecting the Mang Board WP plugin for WordPress, version

CVE-2026-61974 WordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...

CVE-2026-61974

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...

PT-2025-45552

Name of the Vulnerable Software and Affected Versions Mang Board WP plugin for WordPress versions prior to 2.3.2 Description The Mang Board WP plugin for WordPress is susceptible to Reflected Cross-Site Scripting. This is due to inadequate input sanitization and output escaping of the mp paramete...

EUVD-2024-53093

Malicious code in bioql PyPI...

EUVD-2025-12139

Malicious code in bioql PyPI...

EUVD-2024-19867

Malicious code in bioql PyPI...

CVE-2025-3435

The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the boardheader and boardfooter parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2025-17682 · WordPress · Mang Board Wp

Name of the Vulnerable Software and Affected Versions: Mang Board WP plugin versions up to, and including, 1.8.6 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in the board header and board footer parameters. This allows...

WordPress plugin Mang Board WP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

CVE-2024-30431

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hometory Mang Board WP allows Reflected XSS.This issue affects Mang Board WP: from n/a through 1.8.0...

CVE-2024-56296

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kitae Park Mang Board WP mangboard allows Reflected XSS.This issue affects Mang Board WP: from n/a through = 1.8.4...

CVE-2024-56296 WordPress Mang Board WP plugin <= 1.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hometory Mang Board WP allows Reflected XSS.This issue affects Mang Board WP: from n/a through 1.8.4...