Vulnerabilities

TI-2026-36331 CVE-2026-49107 · GHSA-hfw7-349x-x9m5

WordPress Thrive Apprentice plugin < 10.8.10.2 - PHP Object Injection vulnerability

MEDIUM 49

Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00375 Published 2026-06-17 Fixed in 10.8.10.2 CWE-502

TI-2023-25893 CVE-2023-47783 · GHSA-fcmg-g937-8wc8

WordPress Thrive Theme Builder theme < 3.24.0 - Multiple Authenticated Broken Access Control vulnerability

LOW 36

Missing Authorization vulnerability in Thrive Themes Thrive Theme Builder.This issue affects Thrive Theme Builder: from n/a before 3.24.0.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00356 Published 2024-06-19 Fixed in 3.24.0 CWE-862

TI-2023-25892 CVE-2023-47782 · GHSA-jcw3-r84f-h8jq

WordPress Thrive Theme Builder theme < 3.24.0 - Authenticated Privilege Escalation vulnerability

MEDIUM 41

Improper Privilege Management vulnerability in Thrive Themes Thrive Theme Builder allows Privilege Escalation.This issue affects Thrive Theme Builder: from n/a before 3.24.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00526 Published 2024-05-17 Fixed in 3.24.0 CWE-269

TI-2023-28183 CVE-2023-51531 · GHSA-pp5p-pf9f-v3q8

WordPress Thrive Automator Plugin <= 1.17 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Automator.This issue affects Thrive Automator: from n/a through 1.17.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00234 Published 2024-02-29 No fix listed CWE-352

TI-2023-25891 CVE-2023-47781 · GHSA-33qg-rqxq-9ghc

WordPress Thrive Theme Builder Theme < 3.24.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Theme Builder < 3.24.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00304 Published 2023-11-22 Fixed in 3.24.2 CWE-352

TI-2021-06512 CVE-2021-24220 · GHSA-pf3q-84pr-fv6p

All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion

MEDIUM 46

Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme befor…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03946 Published 2021-04-12 Fixed in 2.0.0 CWE-434

TI-2021-06511 CVE-2021-24219 · GHSA-w835-mmvc-qqfv

All Thrive Themes and Plugins - Unauthenticated Option Update

LOW 29

The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ulti…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02467 Published 2021-04-12 Fixed in 1.4.13.3, 1.4.15.3 +8 CWE-284