CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-89079 — The Theme My Login plugin for WordPress is vulnerable to privilege escalation vi...

·Source: NIST NVD

Updated:

Executive Summary

The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords on multi-site setups in certain configurations.

Analysis

The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords on multi-site setups in certain configurations. CVSS Score: 9.8. Published: 2026-10-16T06:17:12.410.

Indicators of Compromise (1)

CVE (1)
CVE-2026-89079
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 16, 2026. Verified by: NIST.

Related Threats

LOWVulnerabilityNEW

Fintechs top banks and stablecoins for cheap cross-border payment - BIS research

Cross-border payments remain slow and expensive but fintech outfits such as Wise and Remitly have substantially cut costs relative to traditional retail bank wires while stabelcoins still suffer from issues with friction, according to BIS research.

Finextra
MEDIUMVulnerability

More and More Cyber Jobs Require AI Expertise

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/more-more-cyber-jobs-require-ai-expertise-image_small-2-a-33170.jpg" align=right hspace=4><b>But There's No Consensus Way to Assess Levels of Skill</b><br>A growing number of cybersecurity jobs require not just a baseline familiarity with AI tools, but significant AI expertise, according to an analysis of validated job vacancies i

Bank Info Security
MEDIUMVulnerability

New Acronis CEO Seeks MSP Growth Through Platform Expansion

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/new-acronis-ceo-seeks-msp-growth-through-platform-expansion-image_small-6-a-33168.jpg" align=right hspace=4><b>Company Looks to Extend Its Cyber Resilience Roots Into Managed Detection Services</b><br>Former WatchGuard CEO Prakash Panjwani is leading Acronis' push to consolidate MSP security spending through open MDR and XDR integ

Bank Info Security