KKitae Park

Products

Exploited and recent CVEs

• CVE-2026-116847 High 7.1 WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-110071 Medium 6.4 Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute 0.2%
• CVE-2026-111834 Critical 9.9 WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability 0.4%
• CVE-2026-109998 High 7.2 Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX 0.3%
• CVE-2026-109512 Medium 6.4 Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter 0.2%
• CVE-2026-109219 Critical 9.8 Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter 0.7%
• CVE-2026-109698 Critical 9.3 WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability 0.3%
• CVE-2026-88043 High 7.2 Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter 0.2%
• CVE-2026-104909 High 8.1 Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter 1.0%
• CVE-2026-107751 High 7.2 Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter 0.3%
• CVE-2026-104761 Medium 6.4 Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter 0.3%
• CVE-2026-96871 High 7.2 Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter 0.2%
• CVE-2026-94176 High 7.1 WordPress Mang Board WP plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-84770 High 8.8 WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2026-75977 High 8.8 Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie 0.9%
• CVE-2026-61974 High 7.1 WordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-13334 Medium 6.1 Mang Board WP <= 2.3.4 - Reflected Cross-Site Scripting via 'stag' Parameter 0.4%
• CVE-2025-12193 Medium 6.1 Mang Board WP <= 2.3.1 - Reflected Cross-Site Scripting 0.2%
• CVE-2025-3435 Medium 4.4 MangBoard WP <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer 0.2%
• CVE-2024-56296 High 7.1 WordPress Mang Board WP plugin <= 1.8.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%