CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

158 matches found

CVE•added 2021/04/12 2:03 p.m.•90 views

CVE-2021-24220

Several Thrive Themes WordPress themes (including Legacy Rise , Luxe , Minus , Ignition , FocusBlog , Squared , Voice , Performag , Pressive , and Storied ) are vulnerable in versions before 2.0.0 . The root cause is a REST API endpoint used to compress images via the Kraken image optimization en...

9.1CVSS9.2AI score0.03946EPSS

SaveIn wildExploits2References2Affected Software10

EUVD•added 2021/04/12 2:02 p.m.•51 views

EUVD-2021-11133

The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin...

5.3CVSS5.2AI score0.02059EPSS

SaveExploits2References2

CVE•added 2021/04/12 2:02 p.m.•93 views

CVE-2021-24219

Multiple Thrive Themes WordPress plugins and themes are vulnerable to an unauthenticated option update via a REST API endpoint associated with Zapier functionality. The root cause is a logic flaw where the endpoint fails to properly enforce API key requirements when Zapier is disabled; by supplyi...

5.3CVSS5.2AI score0.02059EPSS

SaveIn wildExploits2References2Affected Software20

Cvelist•added 2021/04/12 2:02 p.m.•78 views

CVE-2021-24219 All Thrive Themes and Plugins - Unauthenticated Option Update

5.5AI score0.02059EPSS

SaveExploits2References2

Positive Technologies•added 2021/04/12 12:00 a.m.•8 views

PT-2021-15764

Name of the Vulnerable Software and Affected Versions: Thrive “Legacy” Rise by Thrive Themes WordPress theme versions prior to 2.0.0 Luxe by Thrive Themes WordPress theme versions prior to 2.0.0 Minus by Thrive Themes WordPress theme versions prior to 2.0.0 Ignition by Thrive Themes WordPress the...

9.1CVSS0.03946EPSS

SaveExploits2References5

Rapid7 Vulnerability Database (full)•added 2021/04/12 12:00 a.m.•8 views

CVE-2021-24220: Unrestricted Upload of File with Dangerous Type

Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by...

9.1CVSS5.8AI score0.03946EPSS

SaveExploits2References2

CNNVD•added 2021/04/12 12:00 a.m.•36 views

Wordpress plugin Controlled Admin Access 访问控制错误漏洞

WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in multiple Wordpress plugins that allows an attacker to use this endpoint to add arbitrary data to predefined options in the wpoptions table. The following products and versions are affected: The...

5.3CVSS5.9AI score0.02059EPSS

SaveExploits2References3

Rapid7 Vulnerability Database (full)•added 2021/04/12 12:00 a.m.•6 views

CVE-2021-24219: Improper Access Control

5.3CVSS5.9AI score0.02059EPSS

SaveExploits2References3

CNNVD•added 2021/04/12 12:00 a.m.•44 views

Wordpress插件代码问题漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in a number o...

9.1CVSS8.3AI score0.03946EPSS

SaveExploits2References3

Positive Technologies•added 2021/04/12 12:00 a.m.•22 views

PT-2021-15763

Name of the Vulnerable Software and Affected Versions: Thrive Optimize WordPress plugin versions prior to 1.4.13.3 Thrive Comments WordPress plugin versions prior to 1.4.15.3 Thrive Headline Optimizer WordPress plugin versions prior to 1.3.7.3 Thrive Leads WordPress plugin versions prior to 2.3.9...

5.3CVSS6.4AI score0.02059EPSS

SaveExploits2References5

ThreatPost•added 2021/03/24 8:36 p.m.•48 views

Active Exploits Hit WordPress Sites Vulnerable to Thrive Themes Flaws

Attackers are actively exploiting two recently-patched vulnerabilities in a popular suite of tools for WordPress websites from marketing platform Thrive Themes. Thrive Themes offers various products to help WordPress websites “convert visitors into leads and customers.” Its suite of products,...

0.5AI score

SaveExploits0References4

VulnCheck KEV•added 2021/03/24 12:00 a.m.•16 views

VulnCheck KEV: CVE-2021-24220

9.1CVSS8.1AI score0.03946EPSS

SaveIn wildExploits2References2

VulnCheck KEV•added 2021/03/24 12:00 a.m.•6 views

VulnCheck KEV: CVE-2021-24219

5.3CVSS6AI score0.02059EPSS

SaveIn wildExploits2References4

wpexploit•added 2021/03/24 12:00 a.m.•526 views

All Thrive Themes and Plugins - Unauthenticated Option Update

The plugins and themes register a REST API endpoint associated with Zapier functionality. While this endpoint was intended to require an API key in order to access, it was possible to access it by supplying an empty apikey parameter in vulnerable versions if Zapier was not enabled. Attackers coul...

5CVSS1.1AI score0.02059EPSS

SaveExploits2References1

wpexploit•added 2021/03/24 12:00 a.m.•194 views

All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion

Thrive “Legacy” themes register a REST API endpoint to compress images using the Kraken image optimization engine. By supplying a crafted request in combination with data inserted using the Option Update vulnerability, it was possible to use this endpoint to retrieve malicious code from a remote...

6.4CVSS1AI score0.03946EPSS

SaveExploits2References1

Patchstack•added 2021/03/24 12:00 a.m.•18 views

WordPress Thrive Optimize premium plugin <= 1.4.13.2 - Unauthenticated Option Update vulnerability

Unauthenticated Option Update vulnerability discovered by WordFence in WordPress Thrive Optimize premium plugin versions = 1.4.13.2. Solution Update the WordPress Thrive Optimize premium plugin to the latest available version at least 1.4.13.3...

3AI score