CVE-2026-109219 - Mang Board <= 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter
CVE ID :CVE-2026-109219 Published : Oct. 16, 2026, 5:17 a.m. | 16 minutes ago Description :The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.4 via the mbw_file_upload function. This is due to missing file extension validation...