kitae-park vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 202611

Newest CVEs

• CVE-2026-110071

  Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute

  kitae-park · Mang Board

  Medium6.4
• CVE-2026-109998

  Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX

  kitae-park · Mang Board

  High7.2
• CVE-2026-109512

  Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter

  kitae-park · Mang Board

  Medium6.4
• CVE-2026-109219

  Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter

  kitae-park · Mang Board

  Critical9.8
• CVE-2026-88043

  Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter

  kitae-park · Mang Board

  High7.2
• CVE-2026-104909

  Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter

  kitae-park · Mang Board

  High8.1
• CVE-2026-107751

  Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter

  kitae-park · Mang Board

  High7.2
• CVE-2026-104761

  Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter

  kitae-park · Mang Board

  Medium6.4
• CVE-2026-96871

  Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter

  kitae-park · Mang Board

  High7.2
• CVE-2026-75977

  Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie

  kitae-park · Mang Board WP

  High8.8