Post
Pulse WP
pulse-wp.com
did:plc:m7puovzqhxurz66hip2xwfs6
CVE-2026-89079. CVSS 9.8. Theme My Login up to 7.2.1 lets anyone reset admin passwords. No auth needed. Multisite installs at severe risk.
No patch available yet. Disable the plugin immediately.
Scan your WordPress site: pulse-wp.com
#WordPress #AccessControl #CyberSecurity
2026-10-17T00:00:08.957Z