← WordPress Vulnerabilities
WordPress security by component

Thrive Theme Builder

Thrive Theme Builder is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jun 19, 2024; the highest CVE/CNA score is 8.8.

Plugin slug: thrive-theme

CVE-2023-47783: Thrive Theme Builder: A security weakness

Thrive Theme Builder is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJun 19, 2024
Safe version guidanceSee mitigation notes
Safe version
Jun 19, 2024 CVE-2023-47783
Thrive Theme Builder: A security weakness
Thrive Theme Builder is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE8.3
NVDPending
May 17, 2024 CVE-2023-47782
Thrive Theme Builder: Privilege escalation or authentication bypass
Thrive Theme Builder is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE8.8
NVDPending
Nov 22, 2023 CVE-2023-47781
Thrive Theme: Cross-site request forgery
Thrive Theme is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE8.8
NVD8.8