MyHome Core vulnerabilities

2 known vulnerabilities in MyHome Core from TangibleWP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  MyHome Core: Authentication Bypass by Alternate Name

  CVE-2026-15980Aug 30, 2026TangibleWP

  The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing authorization in the send_link() AJAX handler and improper token validation in the activate() function. This makes i

• 7.5 High severity

  MyHome Core: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-67955Jan 22, 2026TangibleWP

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP MyHome Core myhome-core allows PHP Local File Inclusion.This issue affects MyHome Core: from n/a through <= 4.1.0.