Live › vulnerability › CVE-2026-111834
Go to dashboardMang Board WP, a WordPress board plugin by Kitae Park, accepts uploaded files of dangerous types without checking them. An attacker can upload a web shell to the server and run commands through it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed plugin version in the WordPress admin plugins list or wp-content/plugins/mangboard, and look for uploaded .php files in upload directories.
Update Mang Board WP to a version later than 2.4.4 if one is available; otherwise remove the plugin. unknown for a patched version number.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4.
This page as .md · .json · in your agent: get_signal("CVE-2026-111834")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.