CVE-2026-111834
Deferred Deferred - Pending Action

Unrestricted File Upload in Mang Board WP

Publication date: 2026-10-21

Last updated on: 2026-10-21

Assigner: Patchstack

Description
Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from n/a through 2.4.4.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-21
Last Modified
2026-10-21
Generated
2026-11-10
AI Q&A
2026-10-21
EPSS Evaluated
2026-11-09
NVD
CVE-2026-111834
EUVD
EUVD-2026-107281

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Kitae Park Mang Board WP 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-111834 is an Unrestricted Upload of File with Dangerous Type vulnerability in the Mang Board WP plugin for WordPress. It allows attackers with Subscriber-level access to upload malicious files, such as web shells, to the server. This flaw exists in versions up to 2.4.4 and can lead to full server compromise.

Detection Guidance

Check if the Mang Board WP plugin version is 2.4.4 or earlier by inspecting the plugin directory or WordPress admin panel. Look for unexpected file uploads in web directories, especially PHP files in upload folders. Use server logs to identify suspicious upload activities or unauthorized file modifications.

Impact Analysis

This vulnerability allows attackers to upload and execute arbitrary files on your server, potentially leading to complete system compromise. It can result in data theft, defacement, or the server being used for further attacks. The high CVSS score of 9.9 indicates a critical risk.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating compliance requirements under GDPR, HIPAA, and other regulations. It may result in legal penalties, reputational damage, and loss of trust due to exposed sensitive data.

Mitigation Strategies

Update the Mang Board WP plugin to version 2.4.5 or later immediately. If updating is not possible, apply the Patchstack mitigation rule to block attacks. Remove any unauthorized files, especially web shells, from the server. Restrict file upload permissions and monitor for suspicious activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111834. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...