CVE-2021-24219

Multiple Thrive Themes WordPress plugins and themes are vulnerable to an unauthenticated option update via a REST API endpoint associated with Zapier functionality. The root cause is a logic flaw where the endpoint fails to properly enforce API key requirements when Zapier is disabled; by supplyi...

CVE-2021-24220

Several Thrive Themes WordPress themes (including Legacy Rise , Luxe , Minus , Ignition , FocusBlog , Squared , Voice , Performag , Pressive , and Storied ) are vulnerable in versions before 2.0.0 . The root cause is a REST API endpoint used to compress images via the Kraken image optimization en...