thrivethemes vulnerabilities

Products

• thrive themes builder 3
• focusblog 2
• ignition 2
• luxe 2
• minus 2
• performag 2
• pressive 2
• rise 2
• squared 2
• storied 2
• voice 2
• thrive apprentice 1
• thrive automator 1
• thrive clever widgets 1
• thrive comments 1
• thrive dashboard 1
• thrive headline optimizer 1
• thrive optimize 1
• thrive ovation 1
• thrive quiz builder 1
• thrive visual editor 1

Latest thrivethemes CVEs

Newest publication first

1. CVE-2023-47782 WordPress Thrive Theme Builder theme < 3.24.0 - Authenticated Privilege Escalation vulnerability

   Published 2024-05-17

   High·CVSS 8.8 EPSS 0.53%

   Improper Privilege Management vulnerability in Thrive Themes Thrive Theme Builder allows Privilege Escalation.This issue affects Thrive Theme Builder: from n/a before 3.24.0.

2. CVE-2023-51531 WordPress Thrive Automator Plugin <= 1.17 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2024-02-29

   High·CVSS 8.8 EPSS 0.23%

   Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Automator.This issue affects Thrive Automator: from n/a through 1.17.

3. CVE-2023-47781 WordPress Thrive Theme Builder Theme < 3.24.2 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2023-11-22

   High·CVSS 8.8 EPSS 0.30%

   Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Theme Builder < 3.24.2 versions.

4. CVE-2021-24220 All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion

   Published 2021-04-12

   Critical·CVSS 9.1 EPSS 3.9%

   Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2...

5. CVE-2021-24219 All Thrive Themes and Plugins - Unauthenticated Option Update

   Published 2021-04-12

   Medium·CVSS 5.3 EPSS 2.5%

   The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder W...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.