CVE-2026-15980 | TangibleWP MyHome Core Plugin up to 4.4.5 on WordPress AJAX Handler/Token Validation send_link/activate improper authorization

August 30, 2026 Yanac

A vulnerability described as critical has been identified in TangibleWP MyHome Core Plugin up to 4.4.5 on WordPress. This affects the function send_link/activate of the component AJAX Handler/Token Validation. The manipulation results in improper authorization.

This vulnerability is known as CVE-2026-15980. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More