CVE-2026-84770: WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerability

Q: What does an attacker need to exploit this issue?

The attacker does not need to be authenticated, but exploitation requires user interaction. A victim must be induced to perform a request, such as by visiting attacker-controlled content while authenticated to a relevant WordPress site.

Q: Which plugin versions are affected?

Mang Board WP versions 2.3.8 and earlier are identified as affected.

Published Sep 2, 2026

Updated

Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions.

Affected Software

1 affected component

WordPress Mang Board WP plugin<=2.3.8

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Mang Board WP Plugin to a version that resolves this vulnerability.
Fixed in 2.3.9

Event History

Sep 2, 2026

CVE Published

via MITRE·11:37 AM

Data Sourced

via MITRE·11:37 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker does not need to be authenticated, but exploitation requires user interaction. A victim must be induced to perform a request, such as by visiting attacker-controlled content while authenticated to a relevant WordPress site.

Which plugin versions are affected?