https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T14:34:54.117337+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-81583 CVE-2026-81583 — Theme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation 2026-09-28T14:34:54.118182+00:00

Affected: Unknown Theme My Login

The My Login WordPress plugin before 7.2.0 does not enforce the network's registration setting when processing site signups on multisite installations, allowing users with a subscriber account, and unauthenticated users on some networks, to create new sites and be granted administrator over them.