Theme My Login

theme-my-login · plugin

Known security vulnerabilities for Theme My Login. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

latest Sep 5, 2026

Vulnerabilities

CVE-2025-60098
WordPress Theme My Login Plugin <= 7.1.12 - Broken Access Control Vulnerability
Medium 6.5
CVE-2026-83628
Theme My Login <= 7.1.15 - Authenticated (Subscriber+) Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage
Medium 4.3
CVE-2026-66681
WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability
Medium 4.3
CVE-2024-7422
Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update
Medium 4.3
CVE-2024-32525
WordPress Theme My Login plugin <= 7.1.6 - Broken Access Control vulnerability
Medium 4.3