{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/mang-board--2.4.4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mang_board_project:mang_board:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-109219"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Mang Board (\u003c= 2.4.4)","Mang Board (\u003c= 2.4.3)"],"_cs_severities":["critical"],"_cs_tags":["wordpress","web-vulnerability","rce","web-application-vulnerability","stored-xss"],"_cs_type":"advisory","_cs_vendors":["WordPress"],"content_html":"\u003cp\u003eThe Mang Board plugin for WordPress, in all versions up to and including 2.4.4, contains a critical arbitrary file upload vulnerability within the mbw_file_upload function. The vulnerability arises because the function fails to perform adequate file extension validation on the attacker-controlled image_path parameter. While a separate file_name parameter is subject to an allowlist, the logic incorrectly utilizes the basename of the image_path to determine the final filename, effectively bypassing existing security controls.\u003c/p\u003e\n\u003cp\u003eBecause the required nonce for the upload action is printed on public-facing board pages, unauthenticated attackers can scrape this token and proceed with the upload process. When the plugin is configured for guest posts, which is the default setting, remote attackers can upload executable files (such as PHP webshells) to the server. Successful exploitation enables unauthenticated remote code execution, granting attackers full control over the affected WordPress installation. Organizations should prioritize updating the plugin to a patched version once available and ensuring guest post configurations are restricted where possible.\u003c/p\u003e\n","date_modified":"2026-10-16T06:25:48Z","date_published":"2026-10-16T06:24:33Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mang-board-upload/","summary":"An arbitrary file upload vulnerability in the Mang Board plugin for WordPress allows unauthenticated attackers to achieve remote code execution by bypassing extension validation.","title":"CVE-2026-109219: Arbitrary File Upload in Mang Board Plugin for WordPress","url":"https://feed.craftedsignal.io/briefs/2026-10-mang-board-upload/"}],"language":"en","title":"CraftedSignal Threat Feed - Mang Board (\u003c= 2.4.4)","version":"https://jsonfeed.org/version/1.1"}