CVE-2021-24219

Multiple Thrive Themes WordPress plugins and themes are vulnerable to an unauthenticated option update via a REST API endpoint associated with Zapier functionality. The root cause is a logic flaw where the endpoint fails to properly enforce API key requirements when Zapier is disabled; by supplyi...