Threats tagged 'ghsa-vgf8-cc6h-j39j'

CVE-2026-66681 is a medium severity vulnerability involving an unauthenticated Cross-Site Request Forgery (CSRF) in the Theme My Login plugin version 7.1.14 and earlier. This vulnerability allows an attacker to induce a logged-in user to perform unwanted actions without their consent. The vulnerability does not impact confidentiality or availability but can lead to integrity issues. No official patch or remediation guidance is currently available from the vendor. No known exploits are reported in the wild.