CVE-2026-89079Critical 9.8Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter1.6%
CVE-2026-83628Medium 4.3Theme My Login <= 7.1.15 - Authenticated (Subscriber+) Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage0.4%
CVE-2024-7422Medium 4.3Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update0.2%