Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
theme-my-login
WordPress
· Plugin
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter
CVE-2026-89079
theme-my-login
WordPress
Critical
Fix reported
2026-10-16
Theme My Login 7.0 - 7.1.15 - Authenticated (Subscriber+) Privilege Escalation
CVE-2026-81583
theme-my-login
WordPress
Medium
Fix reported
2026-09-09
Theme My Login <= 7.1.15 - Authenticated (Subscriber+) Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage
CVE-2026-83628
theme-my-login
WordPress
Medium
Fix reported
2026-09-05
Theme My Login <= 7.1.14 - Cross-Site Request Forgery
CVE-2026-66681
theme-my-login
WordPress
Medium
Fix reported
2026-08-13
Theme My Login <= 7.1.12 - Missing Authorization
CVE-2025-60098
theme-my-login
WordPress
Medium
Fix reported
2025-10-03
Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update
CVE-2024-7422
theme-my-login
WordPress
Medium
Fix reported
2024-08-16
Theme My Login <= 7.1.6 - Missing Authorization to Notice Dismissal
CVE-2024-32525
theme-my-login
WordPress
Medium
Fix reported
2024-04-23
Theme My Login <= 6.3.9 - Local File Inclusion
CVE-2014-5155
theme-my-login
WordPress
High
Fix reported
2024-01-22
