Tangiblewp - vulnerabilities (CVEs)

7 CVEs in 5 products, 0 in the last 30 days, newest from 2026-08-30.

Products

CVE-2026-15980 - CVSS 9.8 (critical), 2026-08-30: The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing authorization…
CVE-2026-66654 - CVSS 6 (medium), 2026-08-13: Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.
CVE-2025-67955 - CVSS 7.5 (high), 2026-01-22: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP MyHome Core myhome-core…
CVE-2025-67957 - CVSS 8.1 (high), 2026-01-22: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP Listivo Core listivo-core…
CVE-2025-60117 - CVSS 4.3 (medium), 2025-09-26: Cross-Site Request Forgery (CSRF) vulnerability in TangibleWP Vehica Core vehica-core allows Cross Site Request Forgery.This issue affects Vehica Core: from…
CVE-2025-3105 - CVSS 8.8 (high), 2025-04-04: The Vehica Core plugin for WordPress, used by the Vehica - Car Dealer & Listing WordPress Theme, is vulnerable to privilege escalation in all versions up to,…
CVE-2024-13867 - CVSS 6.1 (medium), 2025-02-13: The Listivo - Classified Ads WordPress Theme theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to,…