PT-2026-57394

The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is vulnerable to unauthorized cache deletion due to a missing capability check on the 'thrivedesk clear cache' AJAX action in all versions up to, and including, 2.1.7. This makes it possible for authenticated...

WordPress Agentic Help Desk plugin for WordPress – Live Chat, AI Chatbot & Ticketing – ThriveDesk plugin <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Cache Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Cache Deletion vulnerability discovered by Legion Hunter in WordPress Plugin ThriveDesk versions = 2.1.7...

CVE-2025-24536

The CVE-2025-24536 entry concerns ThriveDesk WordPress plugin versions up to 2.0.6 with a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during page generation. Affected software is ThriveDesk WordPress plugin (

WordPress ThriveDesk plugin <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian in WordPress Plugin ThriveDesk versions = 2.0.6...