[ Vendor · 11 CVEs ]
kitae-park
CVEs affecting kitae-park published in the last 30 days, plus any kitae-park CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111834 | 21 Oct 2026 | CVSS 9.9 | Kitae Park Mang Board WPUnrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This… | |
| CVE-2026-109219 | 16 Oct 2026 | CVSS 9.8 | kitae-park Mang BoardThe Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.4 via the mbw_file_upload… | |
| CVE-2026-109512 | 16 Oct 2026 | CVSS 6.4 | kitae-park Mang BoardThe Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including… | |
| CVE-2026-109998 | 16 Oct 2026 | CVSS 7.2 | kitae-park Mang BoardThe Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including… | |
| CVE-2026-109698 | 15 Oct 2026 | CVSS 9.3 | Kitae Park Mang Board WPImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Board WP mangboard allows SQL… | |
| CVE-2026-88043 | 15 Oct 2026 | CVSS 7.2 | kitae-park Mang BoardThe Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and… | |
| CVE-2026-107751 | 14 Oct 2026 | CVSS 7.2 | kitae-park Mang BoardThe Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including… | |
| CVE-2026-104761 | 14 Oct 2026 | CVSS 6.4 | kitae-park Mang BoardThe Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including… | |
| CVE-2026-104909 | 14 Oct 2026 | CVSS 8.1 | kitae-park Mang BoardThe Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g… | |
| CVE-2026-96871 | 2 Oct 2026 | CVSS 7.2 | kitae-park Mang BoardThe Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including… | |
| CVE-2026-94176 | 23 Sep 2026 | CVSS 7.1 | Kitae Park Mang Board WPUnauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions. |