CVE-2026-1832

creationtimestamp| type| source ---|---|--- 2026-07-11 05:28:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdwk7sj2p2x 2026-07-14 00:14:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkwf5krjx2y 2026-07-16 08:13:52+00:00| seen|...

CVE-2026-1832 ThriveDesk <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Cache Deletion

The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is vulnerable to unauthorized cache deletion due to a missing capability check on the 'thrivedeskclearcache' AJAX action in all versions up to, and including, 2.1.7. This makes it possible for authenticated...