164 matches found
Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload
Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by...
All Thrive Themes and Plugins - Unauthenticated Option Update
The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin...
CVE-2026-104694
The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter's array key before using it in a SQL query, allowing authenticated attackers with editor-level access to perform blind SQL injection attacks...
CVE-2026-104694 Thrive Automator < 11.2 - Editor+ Blind SQLi via 'additional' Parameter
The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter's array key before using it in a SQL query, allowing authenticated attackers with editor-level access to perform blind SQL injection attacks...
WordPress Thrive Automator plugin < 11.2 - Editor+ Blind SQLi vulnerability
Editor+ Blind SQLi vulnerability discovered by Khanh Nguyen in WordPress Plugin Thrive Automator versions 11.2...
CVE-2026-104694
The Thrive Automator WordPress plugin (versions before 11.2 ) is vulnerable to blind SQL injection . The flaw exists because the plugin fails to properly sanitize and escape a parameter's array key before including it in a SQL query. This vulnerability can be exploited by authenticated attackers ...
EUVD-2026-111700
The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter's array key before using it in a SQL query, allowing authenticated attackers with editor-level access to perform blind SQL injection attacks...
PT-2026-127817
The Thrive Automator WordPress plugin before 11.2 does not properly sanitize and escape a parameter's array key before using it in a SQL query, allowing authenticated attackers with editor-level access to perform blind SQL injection attacks...
CVE-2026-66694
Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...
CVE-2026-66694 WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...
CVE-2026-66694
The CVE-2026-66694 entry concerns an Unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Thrive Architect plugin (versions up to and including 10.9.3.1). The connected documents consistently describe a client-side/server-side XSS condition in Thrive Architect, without...
CVE-2026-66694 WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...
CVE-2026-66694
Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...
EUVD-2026-53901
Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...
CVE-2026-66694: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...
WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Thrive Architect versions = 10.9.3.1...
PT-2026-68591
Name of the Vulnerable Software and Affected Versions Thrive Architect versions prior to 10.9.3.2 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Thrive Architect...
CVE-2026-65435
Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...
CVE-2026-59535
Unauthenticated Broken Access Control in Thrive Product Manager = 10.9.2 versions...
CVE-2026-65435
The CVE-2026-65435 entry concerns the WordPress Thrive Leads plugin (versions <= 10.9.2) with an Unauthenticated Broken Access Control vulnerability. The affected component is Thrive Leads Version