Thrive Themes Builder

Thrive Themes Builder has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2023; all 4 are fixed as of September 2026. Their average CVSS score is 7.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2023 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (25%). Other recurring categories include Improper Access Control, Improper Privilege Management.

Every one of the 4 issues recorded for Thrive Themes Builder has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (3) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSHigh

7.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Thrive Themes Builder vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2023-47781

Thrive Theme Builder < 3.24.2 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

4 records


2023-11-14 00:00	Thrive Theme Builder < 3.24.2 - Cross-Site Request Forgery Thrive Themes Builder < 3.24.2	`CVE-2023-47781`	8.8 High	Rafie Muhammad	Yes
2023-11-14 00:00	Thrive Theme Builder < 3.24.0 - Privilege Escalation Thrive Themes Builder < 3.24.0	`CVE-2023-47782`	8.8 High	Rafie Muhammad	Yes
2023-11-14 00:00	Thrive Theme Builder < 3.24.0 - Missing Authorization Thrive Themes Builder < 3.24.0	`CVE-2023-47783`	8.3 High	Rafie Muhammad	Yes
2021-04-23 00:00	Multiple Thrive Themes and Plugins (Various Versions) - Arbitrary Options Update Thrive Themes Builder < 2.2.4	`CVE-2021-24219`	5.3 Medium	Wordfence	Yes

Showing 1–4 of 4 reports