{"metadata": {"vulnerability": "CVE-2026-89079", "count": 20, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-09-09T00:00:00Z", "date_only": false, "value": "2026-09-09T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-89079", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-09-10T19:21:53.450Z", "date_only": false, "value": "2026-09-10T19:21:53.450Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-89079", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T17:03:51Z", "date_only": false, "value": "2026-10-15T17:03:51.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-89079", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-16T05:30:22.643Z", "date_only": false, "value": "2026-10-16T05:30:22.643Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-89079", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T05:30:22.643Z", "date_only": false, "value": "2026-10-16T05:30:22.643Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-89079", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T05:52:15.493Z", "date_only": false, "value": "2026-10-16T05:52:15.493284Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117449027422711365", "record": "CVE-2026-89079", "field": "creation_timestamp", "uuid": "64cf049b-3dfc-4f9a-92a8-a9bd4dff03fd", "content": "CVE-2026-89079 Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords on multi-site setups in certain configurations.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89079https://www.wordfence.com/threat-intel/vulnerabilities/id/53c548be-b8aa-4949-93f8-7b4d73688540?source=cvehttps://plugins.trac.wordpress.org/changeset/3696081/theme-my-login#wordpress #jfarthing84 #ThemeMyLogin#CVE_2026_89079#bot", "url": "https://infosec.exchange/users/cve/statuses/117449027422711365"}, {"timestamp": "2026-10-16T06:00:05.366Z", "date_only": false, "value": "2026-10-16T06:00:05.366452Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxxvk4m6pj27", "record": "CVE-2026-89079", "field": "creation_timestamp", "uuid": "62feda1f-9d51-4427-a44e-f9288562480b", "content": "CVE-2026-89079 - theme my login\nThe Theme My Login plugin for WordPress, up through version 7.2.1, lets anyone on the internet change the passwords of existing users on certain multi\u2011site installations. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jfarthing84 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxxvk4m6pj27"}, {"timestamp": "2026-10-16T06:17:12Z", "date_only": false, "value": "2026-10-16T06:17:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V32Q-5F5Q-9X8F", "record": "GHSA-V32Q-5F5Q-9X8F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T06:17:12.410Z", "date_only": false, "value": "2026-10-16T06:17:12.410", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89079", "record": "FKIE_CVE-2026-89079", "field": "published"}, {"timestamp": "2026-10-16T06:30:28Z", "date_only": false, "value": "2026-10-16T06:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V32Q-5F5Q-9X8F", "record": "GHSA-V32Q-5F5Q-9X8F", "field": "published"}, {"timestamp": "2026-10-16T06:30:28Z", "date_only": false, "value": "2026-10-16T06:30:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V32Q-5F5Q-9X8F", "record": "GHSA-V32Q-5F5Q-9X8F", "field": "modified"}, {"timestamp": "2026-10-16T08:05:18.080Z", "date_only": false, "value": "2026-10-16T08:05:18.080220Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/c2d6rdcjwlx6f", "record": "CVE-2026-89079", "field": "creation_timestamp", "uuid": "693dc808-1589-4231-a68d-0b791d9281a0", "content": "CVE-2026-89079 - Theme My Login\nCVE ID : CVE-2026-89079\n \n Published : 16 octobre 2026 06:17 | 20\u00a0minutes ago\n \n Description : The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is du...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/c2d6rdcjwlx6f"}, {"timestamp": "2026-10-16T08:07:31.574Z", "date_only": false, "value": "2026-10-16T08:07:31.574947Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxy4nyq4rh2h", "record": "CVE-2026-89079", "field": "creation_timestamp", "uuid": "b53cd631-9e16-4760-8d0a-88acee150a52", "content": "\ud83d\udea8 CVE-2026-89079 \u2014 CVSS 9.8 CRITICAL\n\nThe Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89079\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxy4nyq4rh2h"}, {"timestamp": "2026-10-16T16:48:58.311Z", "date_only": false, "value": "2026-10-16T16:48:58.311097Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-89079", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T16:48:58.311Z", "date_only": false, "value": "2026-10-16T16:48:58.311097Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89079", "record": "FKIE_CVE-2026-89079", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T17:06:54.311Z", "date_only": false, "value": "2026-10-16T17:06:54.311Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-89079", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T17:06:54.311Z", "date_only": false, "value": "2026-10-16T17:06:54.311Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-89079", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:19:42.210Z", "date_only": false, "value": "2026-10-16T18:19:42.210", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-89079", "record": "FKIE_CVE-2026-89079", "field": "lastModified"}, {"timestamp": "2026-10-16T18:21:30.651Z", "date_only": false, "value": "2026-10-16T18:21:30.651746Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117451973512737057", "record": "CVE-2026-89079", "field": "creation_timestamp", "uuid": "8591c2c7-2aef-4152-a6d2-0b94d75a8afe", "content": "\ud83d\udea8 PoC published for a critical unauthenticated WordPress Theme My Login account takeover vulnerability; CVE-2026-89079\nPoC: https://github.com/murrez/CVE-2026-89079\nThe flaw affects WordPress multisite installations using Theme My Login with user-chosen registration passwords enabled. Under the required configuration, an unauthenticated attacker can abuse the lost-password flow to overwrite another user's password and take over the account.\nCVSS: 9.8 CriticalAffected: Theme My Login \u2264 7.2.1Fixed: Theme My Login \u2265 7.2.2\nExploitation is configuration-dependent and requires WordPress multisite with the tml_user_passwords network option enabled. The PoC includes target checking, verification, bulk scanning, and an exploit mode that validates successful account access.", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/117451973512737057"}, {"timestamp": "2026-10-17T00:00:09.536Z", "date_only": false, "value": "2026-10-17T00:00:09.536595Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mxzrvgp5uo2f", "record": "CVE-2026-89079", "field": "creation_timestamp", "uuid": "fab49981-d255-4704-a1e5-492f4e671758", "content": "CVE-2026-89079. CVSS 9.8. Theme My Login up to 7.2.1 lets anyone reset admin passwords. No auth needed. Multisite installs at severe risk.\n\nNo patch available yet. Disable the plugin immediately.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #AccessControl #CyberSecurity", "url": "https://bsky.app/profile/pulse-wp.com/post/3mxzrvgp5uo2f"}]}