Vulnerabilities

TI-2026-47362 CVE-2026-66694 · GHSA-r27x-6vf8-x5gj

WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-06 No fix listed CWE-79

TI-2026-46607 CVE-2026-65435 · GHSA-qc2f-xph5-9vvr

LOW 35

Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00332 Published 2026-07-27 No fix listed CWE-862

TI-2026-42498 CVE-2026-59535 · GHSA-69qp-4jx5-xv9x

LOW 38

Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00301 Published 2026-07-27 No fix listed CWE-862

TI-2026-42507 CVE-2026-59544 · GHSA-3pxr-wpfc-92h9

MEDIUM 50

Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00564 Published 2026-07-23 No fix listed CWE-502