All 6 CVE vulnerabilities found in Theme My Login, with AI-generated Chinese analysis, references, and POCs.
Vendor: Theme My Login
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-83628 | Theme My Login <= 7.1.15 - Authenticated (Subscriber+) Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage CWE-862 | 4.3 | Medium | 2026-09-05 |
| CVE-2026-81583 | Theme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation | - | - | 2026-09-02 |
| CVE-2026-66681 | WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 | 4.3 | Medium | 2026-08-06 |
| CVE-2025-60098 | WordPress Theme My Login Plugin <= 7.1.12 - Broken Access Control Vulnerability CWE-862 | 6.5 | Medium | 2025-09-26 |
| CVE-2024-7422 | Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update CWE-352 | 4.3 | Medium | 2024-08-16 |
| CVE-2024-32525 | WordPress Theme My Login plugin <= 7.1.6 - Broken Access Control vulnerability CWE-862 | 4.3 | Medium | 2024-04-17 |
All 6 known CVE vulnerabilities affecting Theme My Login with full Chinese analysis, references, and POCs where available.