Thrive Theme Builder < 3.24.0 - Missing Authorization

2023-11-2300:00:00

wpscan.com

thrive theme builder

vulnerability

unauthorized access

AI Score

9.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Description The theme is vulnerable to unauthorized use of functionality due to missing capability check in one of its functions. This makes it possible for authenticated attackers, with subscriber-level access and above, to invoke this function intended for higher-privileged users. The exact impact of this vulnerability is not known.

References

patchstack.com/database/vulnerability/thrive-theme/wordpress-thrive-theme-builder-theme-3-20-1-multiple-authenticated-broken-access-control-vulnerability