SQL Injection Vulnerability in Kitae Park Mang Board by WordPress
CVE-2026-109698

9.3CRITICAL

Key Information:

Vendor

WordPress
Status
Mang Board WP
Vendor
CVE Published:
15 October 2026

What is CVE-2026-109698?

The Kitae Park Mang Board WP plugin suffers from an SQL Injection vulnerability that allows attackers to manipulate database queries through improper neutralization of special elements. This vulnerability can lead to unauthorized access and potential damage to the database integrity, affecting versions from n/a up to 2.4.4. Website owners using this plugin should take immediate action to protect against potential exploits.

Affected Version(s)

Mang Board WP 0 <= 2.4.4

References

https://patchstack.com/database/wordpress/plugin/mangboar...
vdb-entry

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

AndrewN | Patchstack Bug Bounty Program
.