A privilege management flaw in the Mang Board WP plugin allows authenticated users to forge administrative cookies and achieve full site takeover.

The plugin uses flawed HMAC generation in the mbw_get_hash_key() function, which relies on the current user identity rather than the provided cookie username. Combined with insufficient validation in mbw_validate_auth_cookie(), this allows authenticated users with subscriber-level access to forge administrator cookies and change passwords.

This vulnerability enables any authenticated user to escalate their privileges to administrator, leading to a complete site takeover. The impact includes unauthorized access to all site data, the ability to modify content, and the potential for malicious code injection. A CVSS score of 8.8 underscores the severity of this privilege escalation flaw.

Immediate Action: Update the Mang Board WP plugin to version 2.3.8 or higher immediately.

Proactive Monitoring: Audit user account activity for unauthorized changes to administrative credentials or unexpected administrative actions.

Compensating Controls: Temporarily disable user registration or the plugin itself if an immediate update cannot be performed to prevent unauthorized exploitation.

Public Exploit Available: Unknown.

Privilege escalation vulnerabilities are critical as they bypass standard access controls. Administrators must update the Mang Board WP plugin to version 2.3.8 immediately to secure their WordPress environment against unauthorized administrative access.