TangibleWP vulnerabilities
7 published CVEs name TangibleWP among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-15980
MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token
TangibleWP · MyHome Core
Critical9.8 - CVE-2026-66654
WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability
TangibleWP · Vehica Core
Medium6.0 - CVE-2025-67957
WordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerability
TangibleWP · Listivo Core
High8.1 - CVE-2025-67955
WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability
TangibleWP · MyHome Core
High7.5 - CVE-2025-60117
WordPress Vehica Core Plugin <= 1.0.100 - Cross Site Request Forgery (CSRF) Vulnerability
TangibleWP · Vehica Core
Medium4.3 - CVE-2025-3105
Vehica Core <= 1.0.97 - Authenticated (Subscriber+) Privilege Escalation
TangibleWP · Vehica Core
High8.8 - CVE-2024-13867
Listivo - Classified Ads WordPress Theme <= 2.3.67 - Reflected Cross-Site Scripting
TangibleWP · Listivo - Classified Ads WordPress Theme
Medium6.1