Login Request a demo
MB
Product
Mang Board
by kitae-park · last CVE Oct 28, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 5Medium 3Low 0
Severity
All severities9Critical1High5Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mang Board to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-109219
9.8
1%
Oct 16
Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter
Affected: 2.4.4
CVE-2026-104909
8.1
1%
Oct 14
Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter
Affected: through 2.4.3
CVE-2026-109998
7.2
0%
Oct 16
Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX
Affected: through 2.4.3
CVE-2026-88043
7.2
0%
Oct 15
Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
Affected: through 2.4.0
CVE-2026-107751
7.2
0%
Oct 14
Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter
Affected: through 2.4.3
CVE-2026-96871
7.2
0%
Oct 2
Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
Affected: through 2.4.2
CVE-2026-110071
New
6.4–Oct 28
Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute
Affected: through 2.4.5
CVE-2026-109512
6.4
0%
Oct 16
Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter
Affected: through 2.4.4
CVE-2026-104761
6.4
0%
Oct 14
Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter
Affected: through 2.4.3
Showing 9