Mang Board

Mang Board has 23 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 23 are fixed as of October 2026. Their average CVSS score is 6.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 11 high. 2026 was the busiest year with 16 disclosures.

The most common weakness is Cross-Site Scripting, behind 15 of the records (65%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection.

Every one of the 23 issues recorded for Mang Board has a vendor fix available, so running the current release closes all known holes.

17 independent researchers contributed these findings, most of them (5) reported by Wordfence PRISM. Mang Board is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.2.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Mang Board vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2026-109219

Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter

Read the full analysis

Vulnerability Records

23 records


2026-10-27 17:40	Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute Mang Board <= 2.4.5	`CVE-2026-110071`	6.4 Medium	Wordfence PRISM	Yes
2026-10-19 13:40	Mang Board <= 2.4.4 - Authenticated (Subscriber+) Arbitrary File Upload Mang Board <= 2.4.4	`CVE-2026-111834`	8.8 High	Nixxies	Yes
2026-10-15 16:11	Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter Mang Board <= 2.4.4	`CVE-2026-109512`	6.4 Medium	Wordfence PRISM	Yes
2026-10-15 16:10	Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX Mang Board <= 2.4.3	`CVE-2026-109998`	7.2 High	poiri3r	Yes
2026-10-15 16:07	Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter Mang Board 2.4.4	`CVE-2026-109219`	9.8 Critical	Osman Hussein	Yes
2026-10-14 16:45	Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter Mang Board <= 2.4.0	`CVE-2026-88043`	7.2 High	John Ryan Albon	Yes
2026-10-13 19:23	Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter Mang Board <= 2.4.3	`CVE-2026-104909`	8.1 High	Wordfence PRISM	Yes
2026-10-13 19:22	Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter Mang Board <= 2.4.3	`CVE-2026-107751`	7.2 High	leon figueira	Yes
2026-10-13 19:22	Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter Mang Board <= 2.4.3	`CVE-2026-104761`	6.4 Medium	Wordfence PRISM	Yes
2026-10-13 11:09	Mang Board <= 2.4.4 - Unauthenticated SQL Injection Mang Board <= 2.4.4	`CVE-2026-109698`	7.5 High	AndrewN	Yes

Showing 1–10 of 23 reports

Latestv2.4.7

Mang Board

Author

Kitae Park

3.7(15)

74/100

Last Updated

2026-10-27 (2d ago)

Active Installs

8,000+

Downloads

125,600

Requires WP

5.5.0+

Requires PHP

5.5.1+

Tested up to

WP 7.2

Created

2015-09-26 (11y ago)

The plugin is available in English, Japanese(日本語), Chinese(中国語) and Korean(한국어). Mang Board Mang Board is a plugin formed of WordPress BBS providing a variety of features such as storage BBS, Gallery BBS, Calendar BBS, membership management, analytics, ecommerce, social login, social sharing, and SEO (Search Engine Optimization) Mang Board Features Allow you to easily keep up with rapidly changing technology and platforms Allow you to easily customize architecture you want to build Allow you to build the responsive web design for various devices such as desktop, mobile and tablets. Allow you to add much functionality with plugins Mang Board Functionalities MB-BASIC: PDS (Personal Data Storage), Gallery, Calendar, Q&A, Webzine (Web Magazine), FAQ MB-BUSINESS: Registration, Social login, membership management, Social sharing, SEO (Search Engine Optimization) MB-COMMERCE: ecommerce sites built using responsive design, open market features, points/rewards and coupon features. Mang Board 특징 (Korean) 빠르게 변화하는 기술, 플랫폼에 보다 쉽게 대응 커스터마이징을 위한 게시판으로 구조를 쉽게 변형이 가능 데스크탑, 태블릿, 모바일 등 다양한 디바이스에 맞는 반응형웹 구축 가능 플러그인 기능을 통해 다양한 기능을 손쉽게 추가 가능 다른 한국형 게시판(kboard,kingkong board)과 혼합해서 사용 가능 Mang Board 기능 (Korean) MB-BASIC: 자료실, 갤러리, 캘린더, 문의하기, 웹진, 자주묻는질문 게시판 MB-BUSINESS: 회원가입, 소셜 로그인, 회원정보, 회원관리, 소셜 공유, 검색엔진 최적화(SEO) MB-COMMERCE: 반응형 쇼핑몰, 오픈마켓, 포인트, 쿠폰, 상품관리, 카트, 주문, 결제 Mang Board Support Homepage: https://mangboard.com Store: https://mangboard.com/store/ Demo1: https://demo.mangboard.com Demo2: https://demo2.mangboard.com Manual: https://mangboard.com/manual/

View on WordPress.org