Thrive Themes vulnerabilities and threats

CVE-2026-49107 is a critical vulnerability in Thrive Themes Thrive Apprentice versions prior to 10.8.10.2. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data, classified under CWE-502. This vulnerability allows an attacker to execute arbitrary code without authentication, impacting confidentiality, integrity, and availability.