CVE-2026-109698: fallo crítico en Kitae Park Mang Board WP
WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability
Publicada el
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.3epss 0.3%
probabilidad de explotación
0.3%top 79% de las CVE
explotación observada
noninguna fuente lo reporta
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Board WP mangboard allows SQL Injection.This issue affects Mang Board WP: from n/a through 2.4.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Productos afectados
Kitae Park · Mang Board WPCVEs relacionadas — Kitae Park Mang Board WP
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-111834CRITICALWordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2024-56296HIGHWordPress Mang Board WP plugin <= 1.8.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-61974HIGHWordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-84770HIGHWordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-94176HIGHWordPress Mang Board WP plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%