What the vulnerability does
01Description
The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. This is due to flawed HMAC generation in the mbw_get_hash_key() function that uses the current user's identity instead of the cookie username parameter when a WordPress user is logged in, combined with insufficient validation in mbw_validate_auth_cookie(). This makes it possible for authenticated attackers, with subscriber-level access and above, to forge administrator authentication cookies and change administrator passwords to achieve complete site takeover.
Explanation of Vulnerability in Simple Terms
02Summary
Mang Board WP versions 2.3.7 and earlier contain a privilege management flaw that allows authenticated users with low-level access to gain unauthorized elevated privileges. An attacker can read, modify, or delete sensitive data and disrupt site operations. All affected versions should be updated immediately.
What an attacker can do
03Attacker Capabilities
Read, modify, or delete site data and disrupt operations after gaining unauthorized elevated privileges.
Potential impact on your site
04Site Impact
Authenticated users can escalate their privileges to perform admin-level actions without authorization.
Conditions required to exploit
05Prerequisites
Attacker must have a low-level user account on the site (e.g., subscriber or contributor role).
Key dates
06Disclosure timeline
August 26, 2026
CVE published
