Skip to content
OpenAdvisories

Vendor

TangibleWP

7 known vulnerabilities.

Products

Vehica Core 3 MyHome Core 2 Listivo - Classified Ads WordPress Theme 1 Listivo Core 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-67955

    WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP MyHome Core myhome-core allows PHP Local File Inclusion.This issue affects MyHome Core: from n/a through <= 4.1.0.

    TangibleWP MyHome Core
  • High 8.1
    CVE-2025-67957

    WordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP Listivo Core listivo-core allows PHP Local File Inclusion.This issue affects Listivo Core: from n/a through <= 2.3.77.

    TangibleWP Listivo Core
  • High 8.8
    CVE-2025-3105

    Vehica Core <= 1.0.97 - Authenticated (Subscriber+) Privilege Escalation

    The Vehica Core plugin for WordPress, used by the Vehica - Car Dealer & Listing WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 1.0.97. This is due to the plugin not properly validating user meta fields prior to up…

    TangibleWP Vehica Core Web / CMS