TangibleWP MyHome Core

• CVE-2026-15980 Critical 9.8 MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token 0.7%
• CVE-2025-67955 High 7.5 WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability 0.6%