Plugin icon

Mang Board

mangboard

Vulnerabilities:

20

Last Updated:

October 16, 2026

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
Mang Board < 2.4.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter
Fixed in
Fixed in 2.4.5
CVSS
6.4 (medium)
Published
2026-10-15
Title
Mang Board < 2.4.4 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX
Fixed in
Fixed in 2.4.4
CVSS
7.2 (high)
Published
2026-10-15
Title
Mang Board < 2.4.5 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter
Fixed in
Fixed in 2.4.5
CVSS
9.8 (critical)
Published
2026-10-14
Title
Mang Board WP < 2.4.1 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
Fixed in
Fixed in 2.4.1
CVSS
7.2 (high)
Published
2026-10-13
Title
Mang Board < 2.4.4 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter
Fixed in
Fixed in 2.4.4
CVSS
8.1 (high)
Published
2026-10-13
Title
Mang Board < 2.4.4 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter
Fixed in
Fixed in 2.4.4
CVSS
7.2 (high)
Published
2026-10-13
Title
Mang Board < 2.4.4 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter
Fixed in
Fixed in 2.4.4
CVSS
6.4 (medium)
Published
2026-10-01
Title
Mang Board < 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter
Fixed in
Fixed in 2.4.3
CVSS
7.2 (high)
Published
2026-09-23
Title
Mang Board < 2.4.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.4.2
CVSS
7.2 (high)
Published
2026-09-02
Title
Mang Board WP < 2.3.9 - Cross-Site Request Forgery
Fixed in
Fixed in 2.3.9
CVSS
4.3 (medium)
Published
2026-08-25
Title
Mang Board WP < 2.3.8 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie
Fixed in
Fixed in 2.3.8
CVSS
8.8 (high)
Published
2026-08-13
Title
Mang Board WP < 2.3.5 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.5
CVSS
7.2 (high)
Published
2026-07-08
Title
Mang Board WP < 2.3.5 - Reflected Cross-Site Scripting via 'stag' Parameter
Fixed in
Fixed in 2.3.5
CVSS
6.1 (medium)
Published
2025-11-07
Title
Mang Board WP < 2.3.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.3.2
CVSS
6.1 (medium)
Published
2025-04-23
Title
MangBoard WP < 1.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer
Fixed in
Fixed in 1.8.7
CVSS
4.4 (medium)
Published
2025-01-03
Title
Mang Board WP < 1.8.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.8.5
CVSS
6.1 (medium)
Published
2024-03-28
Title
Mang Board WP < 1.8.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.8.1
CVSS
6.1 (medium)
Published
2024-01-26
Title
Mang Board WP < 1.7.8 - Admin+ Stored XSS
Fixed in
Fixed in 1.7.8
CVSS
3.5 (low)
Published
2023-09-27
Title
Mang Board WP < 1.8.2 - Settings Update via CSRF
Fixed in
Fixed in 1.8.2
CVSS
4.3 (medium)
Published
2021-10-26
Title
Mang Board WP < 1.6.9 - SQL Injection
Fixed in
Fixed in 1.6.9
CVSS
7.5 (high)