Thrive Themes vulnerabilities

Products

• Thrive Theme Builder 3
• FocusBlog by Thrive Themes 2
• Ignition by Thrive Themes 2
• Luxe by Thrive Themes 2
• Minus by Thrive Themes 2
• Performag by Thrive Themes 2
• Pressive by Thrive Themes 2
• Rise by Thrive Themes 2
• Squared by Thrive Themes 2
• Storied by Thrive Themes 2
• Thrive Apprentice 2
• Voice 2
• Thrive Automator 1
• Thrive Clever Widgets 1
• Thrive Comments 1
• Thrive Dashboard 1
• Thrive Headline Optimizer 1
• Thrive Leads 1
• Thrive Optimize 1
• Thrive Ovation 1
• Thrive Quiz Builder 1
• Thrive Themes Builder 1
• Thrive Ultimatum 1
• Thrive Visual Editor 1

Latest Thrive Themes CVEs

Newest publication first

1. CVE-2026-49107 WordPress Thrive Apprentice plugin < 10.8.10.2 - PHP Object Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.8 EPSS 0.38%

   Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.

2. CVE-2023-47783 WordPress Thrive Theme Builder theme < 3.24.0 - Multiple Authenticated Broken Access Control vulnerability

   Published 2024-06-19

   High·CVSS 8.3 EPSS 0.36%

   Missing Authorization vulnerability in Thrive Themes Thrive Theme Builder.This issue affects Thrive Theme Builder: from n/a before 3.24.0.

3. CVE-2023-47782 WordPress Thrive Theme Builder theme < 3.24.0 - Authenticated Privilege Escalation vulnerability

   Published 2024-05-17

   High·CVSS 8.8 EPSS 0.53%

   Improper Privilege Management vulnerability in Thrive Themes Thrive Theme Builder allows Privilege Escalation.This issue affects Thrive Theme Builder: from n/a before 3.24.0.

4. CVE-2023-51531 WordPress Thrive Automator Plugin <= 1.17 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2024-02-29

   High·CVSS 8.8 EPSS 0.23%

   Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Automator.This issue affects Thrive Automator: from n/a through 1.17.

5. CVE-2023-47781 WordPress Thrive Theme Builder Theme < 3.24.2 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2023-11-22

   High·CVSS 8.8 EPSS 0.30%

   Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Theme Builder < 3.24.2 versions.

6. CVE-2021-24220 All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion

   Published 2021-04-12

   Critical·CVSS 9.1 EPSS 3.9%

   Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2...

7. CVE-2021-24219 All Thrive Themes and Plugins - Unauthenticated Option Update

   Published 2021-04-12

   Medium·CVSS 5.3 EPSS 2.5%

   The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder W...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.