Thrive Themes Vulnerabilities and Affected Products
Vulnerabilities associated with Thrive Apprentice.
Products
Clear product- Thrive Theme Builder3 vulnerabilities
- FocusBlog by Thrive Themes2 vulnerabilities
- Ignition by Thrive Themes2 vulnerabilities
- Luxe by Thrive Themes2 vulnerabilities
- Minus by Thrive Themes2 vulnerabilities
- Performag by Thrive Themes2 vulnerabilities
- Pressive by Thrive Themes2 vulnerabilities
- Rise by Thrive Themes2 vulnerabilities
- Squared by Thrive Themes2 vulnerabilities
- Storied by Thrive Themes2 vulnerabilities
- Thrive Apprentice2 vulnerabilities
- Voice2 vulnerabilities
- Thrive Automator1 vulnerability
- Thrive Clever Widgets1 vulnerability
- Thrive Comments1 vulnerability
- Thrive Dashboard1 vulnerability
- Thrive Headline Optimizer1 vulnerability
- Thrive Leads1 vulnerability
- Thrive Optimize1 vulnerability
- Thrive Ovation1 vulnerability
- Thrive Quiz Builder1 vulnerability
- Thrive Themes Builder1 vulnerability
- Thrive Ultimatum1 vulnerability
- Thrive Visual Editor1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-49107CRITICAL | WordPress Thrive Apprentice plugin < 10.8.10.2 - PHP Object Injection vulnerabilityUnauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions. CWE-502Jun 17, 2026 | CVSS9.8v3.1 | EPSS0.375% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-24219MEDIUM | All Thrive Themes and Plugins - Unauthenticated Option UpdateThe Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin before 2.3.9.4, Thrive Apprentice WordPress plugin before 2.3.9.4, Thrive Visual Editor WordPress plugin before 2.6.7.4, Thrive Dashboard WordPress plugin before 2.3.9.3, Thrive Ovation WordPress plugin b… | CVSS5.3v3.1 | EPSS2.06% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |