vulnerability
WordPress Theme: thrive-theme: CVE-2023-47783: Missing Authorization
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:S/C:C/I:C/A:P) | Nov 14, 2023 | Dec 8, 2025 | Dec 8, 2025 |
Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:P)
Published
Nov 14, 2023
Added
Dec 8, 2025
Modified
Dec 8, 2025
Description
The Thrive Theme Builder theme for WordPress is vulnerable to unauthorized use of functionality due to missing capability check in one of its functions in versions prior to 3.24.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to invoke this function intended for higher-privileged users. The exact impact of this vulnerability is not known.
Solution
thrive-theme-theme-cve-2023-47783
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.