CVE-2026-81583

Theme My Login WordPress plugin (versions 7.0 through 7.1.15 ) fails to enforce the network's registration setting when processing site signups on multisite installations. This allows subscriber-level users —and unauthenticated users on some networks—to create new sites and be granted administrat...