PT-2024-13491 · Thrive Themes · Thrive Theme Builder

Rafie Muhammad · Published 2024-05-17 · Updated 2024-05-17 · CVE-2023-47782

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Thrive Theme Builder versions prior to 3.24.0

Description The issue is related to Improper Privilege Management, allowing Privilege Escalation in Thrive Themes Thrive Theme Builder.

Recommendations For versions prior to 3.24.0, update to version 3.24.0 or later to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-47782

Affected Products

Thrive Theme Builder

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-47782 · Security Note
• https://patchstack.com/database/vulnerability/thrive-theme/wordpress-thrive-theme-builder-theme-3-20-1-authenticated-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1791420424032571806 · Twitter Post
• https://twitter.com/CVEnew/status/1791390952776684007 · Twitter Post
• https://twitter.com/CveFindCom/status/1791409050447434139 · Twitter Post
• https://t.me/cvenotify/80213 · Telegram Post