TangibleWP Vehica Core vulnerabilities

3 published CVEs name TangibleWP Vehica Core among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 1
Critical: 0
Known exploited: 0

Critical 0High 1Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

20252
20261

Newest CVEs

CVE-2026-66654
WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability
TangibleWP · Vehica Core
Medium6.0
CVE-2025-60117
WordPress Vehica Core Plugin <= 1.0.100 - Cross Site Request Forgery (CSRF) Vulnerability
TangibleWP · Vehica Core
Medium4.3
CVE-2025-3105
Vehica Core <= 1.0.97 - Authenticated (Subscriber+) Privilege Escalation
TangibleWP · Vehica Core
High8.8

Most common weaknesses