Thrive Theme Builder < 3.24.2 - Cross-Site Request Forgery

2023-11-2300:00:00

wpscan.com

thrive theme builder

cross-site request forgery

csrf attacks

security vulnerability

logged in users

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The theme does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

References

patchstack.com/database/vulnerability/thrive-theme/wordpress-thrive-theme-builder-theme-3-20-1-cross-site-request-forgery-csrf-to-account-takeover-vulnerability