Theme My Login

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Theme My Login records in CISA KEV

No Theme My Login vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

2fa 1 record MEDIUM

Records

2 records

TI-2023-05760 CVE-2023-6272 · GHSA-m6gh-58ph-rm3q

Theme My Login 2FA < 1.2 - Lack of Rate Limiting

MEDIUM 44

The Theme My Login 2FA WordPress plugin before 1.2 does not rate limit 2FA validation attempts, which may allow an attacker to brute-force all possibilities, which shouldn't be too long, as the 2FA codes are 6 digits.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00892 Published 2023-12-18 Fixed in 1.2 CWE-307

TI-2024-21412 CVE-2024-32525 · GHSA-p7jx-62xc-wh3g

WordPress Theme My Login plugin <= 7.1.6 - Broken Access Control vulnerability

LOW 22

Missing Authorization vulnerability in Theme My Login.This issue affects Theme My Login: from n/a through 7.1.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2024-04-17 No fix listed CWE-862

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0