Vulnerabilities in TangibleWP
7 resultsCVE-2026-15980CRITICALMyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation TokenEPSS 0.7%CVE-2025-67957HIGHWordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2025-67955HIGHWordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2025-3105HIGHVehica Core <= 1.0.97 - Authenticated (Subscriber+) Privilege EscalationEPSS 0.4%CVE-2024-13867MEDIUMListivo - Classified Ads WordPress Theme <= 2.3.67 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2026-66654MEDIUMWordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2025-60117MEDIUMWordPress Vehica Core Plugin <= 1.0.100 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%