TangibleWP Vehica Core

• CVE-2026-66654 Medium 6.0 WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability 0.2%
• CVE-2025-60117 Medium 4.3 WordPress Vehica Core Plugin <= 1.0.100 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
• CVE-2025-3105 High 8.8 Vehica Core <= 1.0.97 - Authenticated (Subscriber+) Privilege Escalation 0.4%