Vulnerabilities

TI-2026-75201 CVE-2026-89079 · GHSA-v32q-5f5q-9x8f

Account takeover in Theme My Login WordPress plugin

MEDIUM 52

The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01631 Published 2026-10-16 No fix listed CWE-269

TI-2026-57722 CVE-2026-83628 · GHSA-6vjm-3j93-7v9p

LOW 20

The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Multisite installations.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00394 Published 2026-09-05 No fix listed CWE-862

TI-2024-06878 CVE-2024-7422 · GHSA-23vw-j9vf-mc2f

LOW 19

The Theme My Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.1.7.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00196 Published 2024-08-16 No fix listed CWE-352