Thrivethemes develops a suite of WordPress-focused design and content-creation themes and plugins, including products such as Focus Blog, Ignition, Luxe, Minus, and Pressive, that serve small-to-medium publishers and entrepreneurs. Its vulnerability surface centers on web-application design patterns: cross-site request forgery, improper access control, missing authentication for critical functions, and unrestricted file uploads are the recurring weakness classes observed across its product line, reflecting the authentication and input-validation demands of WordPress ecosystem tooling. Current severity, exploitation status, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Thrivethemes over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-24220CRITICAL Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignitio | Apr 12, 2021 | 9.1 | 38 | NO | YES |
CVE-2026-49107CRITICAL Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions. | Jun 17, 2026 | 9.8 | 33 | NO | NO |
CVE-2021-24219MEDIUM The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads Word | Apr 12, 2021 | 5.3 | 28 | NO | YES |
CVE-2023-47781HIGH Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Theme Builder < 3.24.2 versions. | Nov 22, 2023 | 8.8 | 24 | NO | NO |
CVE-2023-51531HIGH Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Automator.This issue affects Thrive Automator: from n/a through 1.17. | Feb 29, 2024 | 8.8 | 23 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Thrivethemes.
Media articles that mention a CVE ID that affects a product developed by Thrivethemes — matched by CVE ID, not by vendor name.