Skip to content
OpenAdvisories

Vendor

jfarthing84

3 known vulnerabilities.

Products

Theme My Login 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-83628

    Theme My Login <= 7.1.15 - Authenticated (Subscriber+) Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage

    The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Multisite installations. This is due to the `tml_ms_signup_handler()` function's `gimmeanotherblog` branch failing to enforce the networ…

    jfarthing84 Theme My Login Web / CMS
  • Medium 4.3
    CVE-2024-7422

    Theme My Login <= 7.1.7 - Cross-Site Request Forgery to Settings Update

    The Theme My Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.1.7. This is due to missing or incorrect nonce validation on the tml_admin_save_ms_settings() function. This makes it possible for unau…

    jfarthing84 Theme My Login Web / CMS