Skip to content
OpenAdvisories

Vendor

kitae-park

22 known vulnerabilities.

Products

Mang Board WP 13 Mang Board 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-111834

    WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4.

    kitae-park Mang Board WP
  • Critical 9.8
    CVE-2026-109219

    Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter

    The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in version 2.4.4 via the mbw_file_upload function. This is due to missing file extension validation on the attacker-supplied image_path parameter, whose basename-derived file name bypa…

    kitae-park Mang Board Web / CMS
  • Critical 9.3
    CVE-2026-109698

    WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Board WP mangboard allows SQL Injection.This issue affects Mang Board WP: from n/a through 2.4.4.

    kitae-park Mang Board WP