CVE-2026-111834: fallo crítico en Kitae Park Mang Board WP
WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability
Publicada el
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.9epss 0.4%
probabilidad de explotación
0.4%top 70% de las CVE
explotación observada
noninguna fuente lo reporta
Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Kitae Park · Mang Board WPCVEs relacionadas — Kitae Park Mang Board WP
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-56296HIGHWordPress Mang Board WP plugin <= 1.8.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-109698CRITICALWordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-61974HIGHWordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-84770HIGHWordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-94176HIGHWordPress Mang Board WP plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%