Thrive Leads

Thrive Leads has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Improper Access Control, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Thrive Leads has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Thrive Leads vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-65435

Thrive Leads Version <= 10.9.2 - Missing Authorization

Read the full analysis

Vulnerability Records

2 records


2026-07-27 00:00	Thrive Leads Version <= 10.9.2 - Missing Authorization Thrive Leads <= 10.9.2	`CVE-2026-65435`	5.3 Medium	Dave Jong	Yes
2021-04-23 00:00	Multiple Thrive Themes and Plugins (Various Versions) - Arbitrary Options Update Thrive Leads < 2.3.9.4	`CVE-2021-24219`	5.3 Medium	Wordfence	Yes

Showing 1–2 of 2 reports