← WordPress Vulnerabilities
WordPress security by component

Mang Board WP

Mang Board WP is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Jul 09, 2026; the highest CVE/CNA score is 7.1.

Plugin slug: mangboard

CVE-2026-13334: Mang Board WP: Cross-site scripting

Mang Board WP is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.3.4.

PublishedJul 09, 2026
Known safe version> 2.3.4
Safe version
Jul 09, 2026 CVE-2026-13334
Mang Board WP: Cross-site scripting
Mang Board WP is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.3.4.
> 2.3.4
CVE6.1
NVDPending
Jan 07, 2025 CVE-2024-56296
Mang Board WP: Cross-site scripting
Mang Board WP is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVDPending
Mar 29, 2024 CVE-2024-30431
Mang Board WP: Cross-site scripting
Mang Board WP is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVDPending
Jan 31, 2024 CVE-2024-22306
Mang Board WP: Cross-site scripting
Mang Board WP is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.9
NVD4.8
Oct 10, 2023 CVE-2023-44257
Mangboard: Cross-site request forgery
Mangboard is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVD8.8