jfarthing84

Products

ProductCVEsExploitedLatest
Theme My Login3–Oct 16, 2026

Exploited and recent CVEs

  • CVE-2026-89079 Critical 9.8 Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter 1.6%
  • CVE-2026-83628 Medium 4.3 Theme My Login <= 7.1.15 - Authenticated (Subscriber+) Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage 0.4%
  • CVE-2024-7422 Medium 4.3 Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update 0.2%