TangibleWP

Products

Product	CVEs	Exploited	Latest
Vehica Core	3	–	Aug 13, 2026
MyHome Core	2	–	Aug 30, 2026
Listivo - Classified Ads WordPress Theme	1	–	Feb 13, 2025
Listivo Core	1	–	Jan 22, 2026

CVE-2026-15980 Critical 9.8 MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token 0.7%
CVE-2026-66654 Medium 6.0 WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability 0.2%
CVE-2025-67957 High 8.1 WordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerability 0.6%
CVE-2025-67955 High 7.5 WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability 0.6%
CVE-2025-60117 Medium 4.3 WordPress Vehica Core Plugin <= 1.0.100 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
CVE-2025-3105 High 8.8 Vehica Core <= 1.0.97 - Authenticated (Subscriber+) Privilege Escalation 0.4%
CVE-2024-13867 Medium 6.1 Listivo - Classified Ads WordPress Theme <= 2.3.67 - Reflected Cross-Site Scripting 0.3%