The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin before 2.3.9.4, Thrive Apprentice WordPress plugin before 2.3.9.4, Thrive Visual Editor WordPress plugin before 2.6.7.4, Thrive Dashboard WordPress plugin before 2.3.9.3, Thrive Ovation WordPress plugin before 2.4.5, Thrive Clever Widgets WordPress plugin before 1.57.1 and Rise by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Squared by Thrive Themes WordPress theme before 2.0.0, Voice WordPress theme before 2.0.0, Performag by Thrive Themes WordPress theme before 2.0.0, Pressive by Thrive Themes WordPress theme before 2.0.0, Storied by Thrive Themes WordPress theme before 2.0.0, Thrive Themes Builder WordPress theme before 2.2.4 register a REST API endpoint associated with Zapier functionality. While this endpoint was intended to require an API key in order to access, it was possible to access it by supplying an empty api_key parameter in vulnerable versions if Zapier was not enabled. Attackers could use this endpoint to add arbitrary data to a predefined option in the wp_options table.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Focusblog Theme | — | Update focusblog theme to version 2.0.0, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
| Ignition Theme | — | Update ignition theme to version 2.0.0, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
| Luxe Theme | — | Update luxe theme to version 2.0.0, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
| Minus Theme | — | Update minus theme to version 2.0.0, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
| Performag Theme | — | Update performag theme to version 2.0.0, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
| Pressive Theme | — | Update pressive theme to version 2.0.0, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
| Rise Theme | — | Update rise theme to version 2.0.0, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
| Squared Theme | — | Update squared theme to version 2.0.0, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
| Storied Theme | — | Update storied theme to version 2.0.0, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
| Thrive Ab Page Testing Plugin | — | Update thrive-ab-page-testing plugin to version 1.4.13.3, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Thrive Apprentice Plugin | — | Update thrive-apprentice plugin to version 2.3.9.4, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Thrive Clever Widgets Plugin | — | Update thrive-clever-widgets plugin to version 1.57.1, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Thrive Comments Plugin | — | Update thrive-comments plugin to version 1.4.15.3, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Thrive Dashboard Plugin | — | Update thrive-dashboard plugin to version 2.3.9.3, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Thrive Headline Optimizer Plugin | — | Update thrive-headline-optimizer plugin to version 1.3.7.3, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Thrive Leads Plugin | — | Update thrive-leads plugin to version 2.3.9.4, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Thrive Ovation Plugin | — | Update thrive-ovation plugin to version 2.4.5, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Thrive Quiz Builder Plugin | — | Update thrive-quiz-builder plugin to version 2.3.9.4, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Thrive Theme Theme | — | Update thrive-theme theme to version 2.2.4, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
| Thrive Ultimatum Plugin | — | Update thrive-ultimatum plugin to version 2.3.9.4, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Thrive Visual Editor Plugin | — | Update thrive-visual-editor plugin to version 2.6.7.4, or a newer patched version | May 15, 2025 | Apr 23, 2021 |
| Voice Theme | — | Update voice theme to version 2.0.0, or a newer patched version | Dec 8, 2025 | Apr 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub