Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2663▼ 380 respecto a la semana anterior

Críticas / altas1289▼ 36 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-83628	Aplazada	Media (4.3)	0.39%	—	Thememylogin Theme MY Login^AI	5/9/2026	8/9/2026	The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Multisite installations. This is due to the `tml_ms_signup_handler()` function's `gimmeanotherblog` branch failing to enforce the network's `active_signup` registration policy, checking only…
CVE-2026-66681	Aplazada	Media (4.3)	0.14%	—	Thememylogin Theme MY Login^AI	6/8/2026	12/8/2026	Unauthenticated Cross Site Request Forgery (CSRF) in Theme My Login <= 7.1.14 versions.
CVE-2025-60098	Aplazada	Media (6.5)	0.31%	—	Jeff Farthing Theme MY Login^AI	26/9/2025	17/6/2026	Missing Authorization vulnerability in Jeff Farthing Theme My Login theme-my-login allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theme My Login: from n/a through <= 7.1.12.
CVE-2024-7422	Aplazada	Media (4.3)	0.20%	—	Thememylogin Theme MY Login^AI	16/8/2024	17/6/2026	The Theme My Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.1.7. This is due to missing or incorrect nonce validation on the tml_admin_save_ms_settings() function. This makes it possible for unauthenticated attackers to update the theme's settings via a…
CVE-2024-32525	Aplazada	Media (4.3)	0.34%	—	Thememylogin Theme MY Login^AI	17/4/2024	17/6/2026	Missing Authorization vulnerability in Theme My Login.This issue affects Theme My Login: from n/a through 7.1.6.