CVE-2026-88910

The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers...

EUVD-2026-80213

The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers...

WordPress kboard plugin < 6.7 - Unauthenticated Board Media Deletion vulnerability

Unauthenticated Board Media Deletion vulnerability discovered by SeongJun Joo in WordPress Plugin kboard versions 6.7...

CVE-2026-88910 KBoard < 6.7 - Unauthenticated Board Media Deletion via IDOR

The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers...

CVE-2026-88910

The kboard WordPress plugin (versions before 6.7 ) is vulnerable to an unauthenticated board media deletion due to an IDOR (Insecure Direct Object Reference) flaw. The plugin fails to verify ownership or context before processing media deletion requests, allowing an attacker to permanently delete...

CVE-2026-88910 KBoard < 6.7 - Unauthenticated Board Media Deletion via IDOR

The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers...

CVE-2026-88910: Authorization Bypass Through User-Controlled Key

The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers...

PT-2026-93314

The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers...

WordPress Plugin KBoard /wp-content/plugins/kboard/board.php parameters keyword XSS vulnerability

No description provided by source...

WordPress Plugin KBoard 2.7 board.php parameters uid SQL injection vulnerability

No description provided by source...

WordPress KBoard 2.7 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : WordPress Plugin KBoard 2.7 - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Google Dork : intitle:"KBoard 2.7" Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps...

WordPress KBoard 2.7 SQL Injection

Exploit Title : WordPress Plugin KBoard 2.7 - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Google Dork : intitle:"KBoard 2.7" Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps Tested on Win Version : 2.7 Date 2016/09/26 PoC = Sql...

WordPress KBoard Cross Site Scripting

Exploit Title : WordPress Plugin KBoard - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps Tested on Win Version : Before 4.4 Date 2016/09/26 PoC =Cross Site Scripting : Payload : 1" onmouseover=prompt"Persian"...

WordPress plugins KBoard SQLi/XSS Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...