Thrive Themes Coupon vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-66694Thrive Architect (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-06CVE Database V5CVE-2026-66694 CVE-2026-66694 is a high-severity unauthenticated cross-site scripting (XSS) vulnerability in Thrive Architect versions up to and including 10.9.3.1. This vulnerability allows an attacker to inject malicious scripts during web page generation without requiring authentication. The flaw is categorized under CWE-79, indicating improper neutralization of input. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time. EPSS 0.3%Vulnerability Thrive Themes Coupon CWE-79 #ghsa-r27x-6vf8-x5gj	CVE Database V5	2026-08-06
Medium	6.5	EPSS 0.3%	CVE-2026-65435Thrive Leads Version (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-07-27CVE Database V5CVE-2026-65435 Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions. EPSS 0.3%Vulnerability Thrive Themes Coupon CWE-862	CVE Database V5	2026-07-27
High	7.3	EPSS 0.3%	CVE-2026-59535Thrive Product Manager (WordPress plugin) · Missing Authorization High7.3EPSS 0.3%2026-07-27CVE Database V5CVE-2026-59535 Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions. EPSS 0.3%Vulnerability Thrive Themes Coupon CWE-862	CVE Database V5	2026-07-27
Critical	9.8	EPSS 0.6%	CVE-2026-59544Thrive Quiz Builder (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-07-23CVE Database V5CVE-2026-59544 Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions. EPSS 0.6%Vulnerability Thrive Themes Coupon CWE-502	CVE Database V5	2026-07-23

Page 1 of 1