Thrive Themes Thrive Apprentice vulnerabilities

Latest Thrive Themes Thrive Apprentice CVEs

Newest publication first

1. CVE-2026-49107 WordPress Thrive Apprentice plugin < 10.8.10.2 - PHP Object Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.8 EPSS 0.38%

   Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.

2. CVE-2021-24219 All Thrive Themes and Plugins - Unauthenticated Option Update

   Published 2021-04-12

   Medium·CVSS 5.3 EPSS 2.5%

   The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder W...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.