Lucene search
K

CVE-2021-24219

🗓️ 12 Apr 2021 14:02:35Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 52 Views🌐 WEB

CVE-2021-24219: Thrive WordPress plugins and themes before specified versions allow unauthorized access to REST API endpoint

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2021-24219
24 Sep 202505:15
circl
CNNVD
Wordpress plugin Controlled Admin Access 访问控制错误漏洞
12 Apr 202100:00
cnnvd
Cvelist
CVE-2021-24219 All Thrive Themes and Plugins - Unauthenticated Option Update
12 Apr 202114:02
cvelist
EUVD
EUVD-2021-11133
12 Apr 202114:02
euvd
Nuclei
All Thrive Themes and Plugins - Unauthenticated Option Update
8 Jun 202604:09
nuclei
NVD
CVE-2021-24219
12 Apr 202114:15
nvd
Prion
Design/Logic Flaw
12 Apr 202114:15
prion
Positive Technologies
PT-2021-15763
12 Apr 202100:00
ptsecurity
RedhatCVE
CVE-2021-24219
22 May 202521:05
redhatcve
VulnCheck KEV
VulnCheck KEV: CVE-2021-24219
24 Mar 202100:00
vulncheck_kev
Rows per page
NVD
Vulners
Node
thrivethemesfocusblogRange<2.0.0wordpress
OR
thrivethemesignitionRange<2.0.0wordpress
OR
thrivethemesluxeRange<2.0.0wordpress
OR
thrivethemesminusRange<2.0.0wordpress
OR
thrivethemesperformagRange<2.0.0wordpress
OR
thrivethemespressiveRange<2.0.0wordpress
OR
thrivethemesriseRange<2.0.0wordpress
OR
thrivethemessquaredRange<2.0.0wordpress
OR
thrivethemesstoriedRange<2.0.0wordpress
OR
thrivethemesthrive_apprenticeRange<2.3.9.4wordpress
OROR
thrivethemesthrive_commentsRange<1.4.15.3wordpress
OR
thrivethemesthrive_dashboardRange<2.3.9.3wordpress
OROR
thrivethemesthrive_optimizeRange<1.4.13.3wordpress
OR
thrivethemesthrive_ovationRange<2.4.5wordpress
OR
thrivethemesthrive_quiz_builderRange<2.3.9.4wordpress
OROR
thrivethemesthrive_visual_editorRange<2.6.7.4wordpress
OR
thrivethemesvoiceRange<2.0.0wordpress
[
  {
    "product": "Thrive Optimize",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "1.4.13.3",
        "status": "affected",
        "version": "1.4.13.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Comments",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "1.4.15.3",
        "status": "affected",
        "version": "1.4.15.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Headline Optimizer",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "1.3.7.3",
        "status": "affected",
        "version": "1.3.7.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Leads",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.3.9.4",
        "status": "affected",
        "version": "2.3.9.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Ultimatum",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.3.9.4",
        "status": "affected",
        "version": "2.3.9.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Quiz Builder",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.3.9.4",
        "status": "affected",
        "version": "2.3.9.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Apprentice",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.3.9.4",
        "status": "affected",
        "version": "2.3.9.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Visual Editor",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.6.7.4",
        "status": "affected",
        "version": "2.6.7.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Dashboard",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.3.9.3",
        "status": "affected",
        "version": "2.3.9.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Ovation",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.4.5",
        "status": "affected",
        "version": "2.4.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Clever Widgets",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "1.57.1",
        "status": "affected",
        "version": "1.57.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Rise by Thrive Themes",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Ignition by Thrive Themes",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Luxe by Thrive Themes",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "FocusBlog by Thrive Themes",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Minus by Thrive Themes",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Squared by Thrive Themes",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Voice",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Performag by Thrive Themes",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Pressive by Thrive Themes",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Storied by Thrive Themes",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Thrive Themes Builder",
    "vendor": "Thrive Themes",
    "versions": [
      {
        "lessThan": "2.2.4",
        "status": "affected",
        "version": "2.2.4",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
hook_urlrequest body/wp-json/td/v1/optin/subscriptionREST endpoint vulnerability allowing data to be added to wp_options via an empty api_key parameter when Zapier is disabled.CWE-284CWE-306
api_keyrequest body/wp-json/td/v1/optin/subscriptionREST endpoint vulnerability allowing data to be added to wp_options via an empty api_key parameter when Zapier is disabled.CWE-284CWE-306

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:52Current
5.2Medium risk
Vulners AI Score5.2
CVSS 25
CVSS 3.15.3
EPSS0.16356
52