Skip to content
OpenAdvisories

Vendor

TangibleWP

7 known vulnerabilities.

Products

Vehica Core 3 MyHome Core 2 Listivo - Classified Ads WordPress Theme 1 Listivo Core 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-15980

    MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token

    The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing authorization in the send_link() AJAX handler and improper token validation in the activate() function. This makes …

    TangibleWP MyHome Core Web / CMS