Skip to content
PluginCanary

Mang Board

by Kitae Park · 8,000+ active installs · Checked 3 Nov 2026
Healthy16 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 2.4.7.

81/ 100 Canary Score
Sub-scores for Mang Board
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 2.4.7. Update to version 2.4.7 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 27 Oct 2026, fixed in 2.4.6. Update to version 2.4.6 or later.27 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 2.4.5. Update to version 2.4.5 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 2.4.5. Update to version 2.4.5 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 2.4.4. Update to version 2.4.4 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 2.4.5. Update to version 2.4.5 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 14 Oct 2026, fixed in 2.4.1. Update to version 2.4.1 or later.14 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 2.4.4. Update to version 2.4.4 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 2.4.4. Update to version 2.4.4 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 2.4.4. Update to version 2.4.4 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 2.4.5. Update to version 2.4.5 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 2.4.3. Update to version 2.4.3 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 23 Sep 2026, fixed in 2.4.2. Update to version 2.4.2 or later.23 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 2 Sep 2026, fixed in 2.3.9. Update to version 2.3.9 or later.2 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 25 Aug 2026, fixed in 2.3.8. Update to version 2.3.8 or later.25 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 13 Aug 2026, fixed in 2.3.5. Update to version 2.3.5 or later.13 Aug 2026Evidence
  • InfoSEC-320 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Kitae Park26 Sep 2015 to 27 Oct 2026, 231 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
8 days ago
Releases, 24 months
21
Tested up to
7.2 current
Requires PHP
5.5.1 supported 8.2+
Releases per quarter for Mang Board
Q1 20246
Q2 20240
Q3 20241
Q4 20241
Q1 20251
Q2 20251
Q3 20252
Q4 20251
Q1 20261
Q2 20261
Q3 20269
Q4 20264

Last release 27 Oct 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026Mang Board <= 2.4.6 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.4.62.4.70
27 Oct 2026Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute6.4<= 2.4.52.4.60
19 Oct 2026Mang Board <= 2.4.4 - Authenticated (Subscriber+) Arbitrary File Upload8.8<= 2.4.42.4.50
15 Oct 2026Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter6.4<= 2.4.42.4.50
15 Oct 2026Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX7.2<= 2.4.32.4.40
15 Oct 2026Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter9.82.4.42.4.50
14 Oct 2026Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter7.2<= 2.4.02.4.10
13 Oct 2026Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter8.1<= 2.4.32.4.40
13 Oct 2026Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter7.2<= 2.4.32.4.40
13 Oct 2026Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter6.4<= 2.4.32.4.40
13 Oct 2026Mang Board <= 2.4.4 - Unauthenticated SQL Injection7.5<= 2.4.42.4.50
1 Oct 2026Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter7.2<= 2.4.22.4.30
23 Sep 2026Mang Board <= 2.4.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.4.12.4.20
2 Sep 2026Mang Board WP <= 2.3.8 - Cross-Site Request Forgery4.3<= 2.3.82.3.90
25 Aug 2026Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie8.8<= 2.3.72.3.80
13 Aug 2026Mang Board WP <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.3.42.3.50
8 Jul 2026Mang Board WP <= 2.3.4 - Reflected Cross-Site Scripting via 'stag' Parameter6.1<= 2.3.42.3.50
7 Nov 2025Mang Board WP <= 2.3.1 - Reflected Cross-Site Scripting6.1<= 2.3.12.3.20
23 Apr 2025MangBoard WP <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer4.4<= 1.8.61.8.70
3 Jan 2025Mang Board WP <= 1.8.4 - Reflected Cross-Site Scripting6.1<= 1.8.41.8.50
28 Mar 2024Mang Board WP <= 1.8.0 - Reflected Cross-Site Scripting6.1<= 1.8.01.8.10
26 Jan 2024Mang Board WP <= 1.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.7.71.7.81
27 Sep 2023Mang Board WP <= 1.8.1 - Cross-Site Request Forgery4.3<= 1.8.11.8.2163
19 Oct 2021Mangboard <= 1.9.9 - SQL Injection7.5<= 1.9.92.0.0n/a

Source: Wordfence Intelligence.

Reputation

Lifetime rating 3.7 from 15 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star10
4 star0
3 star0
2 star0
1 star5

Momentum

8,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Mang Board
4 May 202697
11 May 2026177
18 May 2026173
25 May 2026169
1 Jun 2026145
8 Jun 2026164
15 Jun 2026363
22 Jun 2026185
29 Jun 2026172
6 Jul 2026418
13 Jul 2026217
20 Jul 2026205
27 Jul 2026204
3 Aug 2026227
10 Aug 2026517
17 Aug 2026453
24 Aug 2026506
31 Aug 2026722
7 Sep 2026504
14 Sep 2026258
21 Sep 2026748
28 Sep 2026427
5 Oct 2026593
12 Oct 20261,772
19 Oct 20261,059
26 Oct 20261,073
2 Nov 2026111

Weekly downloads over the last 4 weeks are 132% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Private groupsScore 91 · 1,000+BuddyDriveScore 91 · 1,000+forumAttachments for bbPressScore 90 · 6,000+bbPress Notify (No-Spam)Score 90 · 2,000+WP DiscourseScore 90 · 1,000+

Facts

Version2.4.7
AuthorKitae Park
Added26 Sep 2015
Last updated27 Oct 2026
Active installs8,000+
Requires WordPress5.5.0
Tested up to7.2
Requires PHP5.5.1
CategoryCommunity & Social > Forums & Discussion Boards
Tagsboard, gallery, calendar, mangboard, 망보드

Questions

Is Mang Board still maintained?

Mang Board was last updated on 27 Oct 2026. Its Canary status is Healthy.

Is Mang Board safe?

Mang Board has no open unpatched vulnerabilities on record. 20 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Mang Board?

The wordpress.org author is Kitae Park. Recent committers: Kitae Park, plugin-master. We have recorded no ownership change.

What can I use instead of Mang Board?

Plugins in the same category with a higher Canary Score: Private groups, BuddyDrive, forumAttachments for bbPress, bbPress Notify (No-Spam), WP Discourse.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue