CVE-2026-66681

An unauthenticated Cross Site Request Forgery (CSRF) vulnerability exists in Theme My Login versions up to 7.1.14, allowing attackers to perform unauthorized actions on behalf of users without their consent. This could lead to account compromise or unauthorized changes to user settings. Website administrators using affected versions should prioritize patching this vulnerability to safeguard user data and maintain the integrity of their applications.