Tangiblewp

7 CVEs across 5 Tangiblewp products. Browse Tangiblewp vulnerabilities, severities, and proof-of-concept exploits.

Tangiblewp products with known CVEs

ProductCVEs
Vehica Core3
Myhome Core2
Listivo1
Listivo - Classified Ads WordPress Theme1
Listivo Core1
Tangiblewp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15980Critical9.82026-08-30The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing authorization i…
CVE-2026-66654Medium6.02026-08-13Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.
CVE-2025-67957High8.12026-01-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP Listivo Core listivo-core a…
CVE-2025-67955High7.52026-01-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP MyHome Core myhome-core all…
CVE-2025-60117Medium4.32025-09-26Cross-Site Request Forgery (CSRF) vulnerability in TangibleWP Vehica Core vehica-core allows Cross Site Request Forgery.This issue affects Vehica Core: from n/…
CVE-2025-3105High8.82025-04-04The Vehica Core plugin for WordPress, used by the Vehica - Car Dealer & Listing WordPress Theme, is vulnerable to privilege escalation in all versions up to, a…
CVE-2024-13867Medium6.12025-02-13The Listivo - Classified Ads WordPress Theme theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, a…