CVE-2025-67955

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TangibleWP MyHome Core myhome-core allows PHP Local File Inclusion.This issue affects MyHome Core: from n/a through = 4.1.0...

CVE-2025-67955

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TangibleWP MyHome Core myhome-core allows PHP Local File Inclusion.This issue affects MyHome Core: from n/a through = 4.1.0...

CVE-2025-67955

CVE-2025-67955 affects WordPress MyHome Core (TangibleWP MyHome Core) up to version 4.1.0. It is a PHP Local File Inclusion due to improper filename control in include/require, enabling potential LFI via network access. CVSS v3.1 base 7.5, high impact on confidentiality. Remediation: upgrade MyHo...

CVE-2025-67955

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TangibleWP MyHome Core myhome-core allows PHP Local File Inclusion.This issue affects MyHome Core: from n/a through = 4.1.0...

CVE-2025-67955 WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TangibleWP MyHome Core myhome-core allows PHP Local File Inclusion.This issue affects MyHome Core: from n/a through = 4.1.0...

CVE-2025-67955 WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TangibleWP MyHome Core myhome-core allows PHP Local File Inclusion.This issue affects MyHome Core: from n/a through = 4.1.0...

WordPress plugin MyHome Core has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4035

Name of the Vulnerable Software and Affected Versions TangibleWP MyHome Core versions through 4.1.0 Description A flaw exists in TangibleWP MyHome Core that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to a PHP Remot...

WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin MyHome Core versions = 4.1.0...