TangibleWP vulnerabilities

CVEs per yearBy the year they were published

1. 20253
2. 20264

Newest CVEs

• CVE-2026-15980

  MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token

  TangibleWP · MyHome Core

  Critical9.8
• CVE-2026-66654

  WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability

  TangibleWP · Vehica Core

  Medium6.0
• CVE-2025-67957

  WordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerability

  TangibleWP · Listivo Core

  High8.1
• CVE-2025-67955

  WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability

  TangibleWP · MyHome Core

  High7.5
• CVE-2025-60117

  WordPress Vehica Core Plugin <= 1.0.100 - Cross Site Request Forgery (CSRF) Vulnerability

  TangibleWP · Vehica Core

  Medium4.3
• CVE-2025-3105

  Vehica Core <= 1.0.97 - Authenticated (Subscriber+) Privilege Escalation

  TangibleWP · Vehica Core

  High8.8
• CVE-2024-13867

  Listivo - Classified Ads WordPress Theme <= 2.3.67 - Reflected Cross-Site Scripting

  TangibleWP · Listivo - Classified Ads WordPress Theme

  Medium6.1