Thrive Visual Editor

Thrive Visual Editor has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 2 are fixed as of August 2026. Their average CVSS score is 6.3, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Improper Access Control.

Every one of the 2 issues recorded for Thrive Visual Editor has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Thrive Visual Editor vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2026-66694

Thrive Visual Editor <= 10.9.3.1 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2026-08-04 00:00	Thrive Visual Editor <= 10.9.3.1 - Unauthenticated Stored Cross-Site Scripting Thrive Visual Editor <= 10.9.3.1	`CVE-2026-66694`	7.2 High	dutafi	Yes
2021-04-23 00:00	Multiple Thrive Themes and Plugins (Various Versions) - Arbitrary Options Update Thrive Visual Editor < 2.6.7.4	`CVE-2021-24219`	5.3 Medium	Wordfence	Yes

Showing 1–2 of 2 reports