Live › vulnerability › CVE-2026-116847
Mang Board WP, a WordPress plugin, has an unauthenticated cross-site scripting flaw in versions up to and including 2.4.6. An attacker can get script injected into pages that visitors load, which can run in their browsers.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 19:25 UTC. All times on this page are UTC.
Sites running the Mang Board WP WordPress plugin at version 2.4.6 or earlier are exposed, since the flaw needs no login. The sources do not say which plugin features or pages are reachable, so unknown whether a default install is affected. Sites that do not run this plugin can skip it.
No product ranges from the sources yet.
wp plugin get mang-board-wp --field=version if WP-CLI is available.2.4.6; the sources do not name the fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.
This page as .md · .json · in your agent: get_signal("CVE-2026-116847")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.