PLUGIN SECURITY
Is Theme My Login safe?
The ultimate login branding solution! Theme My Login offers matchless customization of your WordPress user experience!
What this plugin does
- Slug:
theme-my-login - Author: Jeff Farthing
- 60000+ active installs
- 74/100 rating (460 reviews on wordpress.org)
- 4359801 all-time downloads
- On WordPress.org since 2009-03-13
brandingcustomizeloginpasswordregister
Maintenance status
- Latest known version: 7.1.14
- Last updated: 2026-08-13 1:47am GMT
- Tested up to WordPress: 7.0.4
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
5 known CVEs on file for Theme My Login.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-66681 | Theme My Login [theme-my-login] < 7.1.15 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 7.1.15 | 7.1.15 | 2026-08-06 | ⚠ update needed |
| CVE-2025-60098 | Theme My Login [theme-my-login] < 7.1.13 | Missing Authorization | Medium 6.5 | < 7.1.13 | 7.1.13 | 2025-09-26 | ✓ fixed in latest |
| CVE-2024-7422 | Theme My Login [theme-my-login] < 7.1.8 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 7.1.8 | 7.1.8 | 2024-08-15 | ✓ fixed in latest |
| CVE-2024-32525 | Theme My Login [theme-my-login] < 7.1.7 | Missing Authorization | Medium 4.3 | < 7.1.7 | 7.1.7 | 2024-04-15 | ✓ fixed in latest |
| — | Theme My Login [theme-my-login] < 6.3.10 | — | Unknown | < 6.3.10 | 6.3.10 | 2015-05-15 | ✓ fixed in latest |
| CVE-2014-5155 | Theme My Login [theme-my-login] < 6.3.10 | — | Unknown | < 6.3.10 | 6.3.10 | 0000-00-00 | ✓ fixed in latest |
| — | Theme My Login [theme-my-login] < 6.3.10 | — | Unknown | < 6.3.10 | 6.3.10 | — | ✓ fixed in latest |
| — | Theme My Login 6.3.9 - Local File Inclusion | — | Unknown | < 6.3.10 | 6.3.10 | — | ✓ fixed in latest |
How to fix it
Keep Theme My Login updated — 7.1.14 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- White Label CMS — 200000+ active installs — 94/100 (113) — max PHP 8.4
- Custom Product Tabs for WooCommerce — 80000+ active installs — 88/100 (163) — max PHP 8.4
- Login Logo — 40000+ active installs — 98/100 (62) — max PHP 8.4
- Visual CSS Style Editor — 30000+ active installs — 82/100 (90)
- WP Custom Admin Interface — 30000+ active installs — 94/100 (160)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.