CVE-2026-109698: WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Board WP mangboard allows SQL Injection.This issue affects Mang Board WP: from n/a through 2.4.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Mang Board WP pluginto a version that resolves this vulnerability.Fixed in 2.4.5
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability is network-accessible and requires no privileges or user interaction. The reported attack complexity is low.
How can I determine whether my site is affected?
Check whether the site uses the Kitae Park Mang Board WP plugin and identify its installed version. Versions through 2.4.4 are listed as affected.
What could exploitation impact?
The CVSS vector indicates high confidentiality impact and low availability impact, with no integrity impact reported. The vulnerability can also affect resources beyond the vulnerable component's security scope.