Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Theme My Login — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Theme My Login, with AI-generated Chinese analysis, references, and POCs.

Vendor: Theme My Login

CVE ID Title CVSS Severity Published
CVE-2026-89079 Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter CWE-269 9.8 Critical 2026-10-16
CVE-2026-83628 Theme My Login <= 7.1.15 - Authenticated (Subscriber+) Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage CWE-862 4.3 Medium 2026-09-05
CVE-2026-81583 Theme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation - - 2026-09-02
CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2026-08-06
CVE-2025-60098 WordPress Theme My Login Plugin <= 7.1.12 - Broken Access Control Vulnerability CWE-862 6.5 Medium 2025-09-26
CVE-2024-7422 Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update CWE-352 4.3 Medium 2024-08-16
CVE-2024-32525 WordPress Theme My Login plugin <= 7.1.6 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-04-17

All 7 known CVE vulnerabilities affecting Theme My Login with full Chinese analysis, references, and POCs where available.