CVE-2021-24219

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2021
Source publication: Apr 12, 2021
Source updated: Aug 3, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

All Thrive Themes and Plugins - Unauthenticated Option Update

The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin before 2.3.9.4, Thrive Apprentice WordPress plugin before 2.3.9.4, Thrive Visual Editor WordPress plugin before 2.6.7.4, Thrive Dashboard WordPress plugin before 2.3.9.3, Thrive Ovation WordPress plugin before 2.4.5, Thrive Clever Widgets WordPress plugin before 1.57.1 and Rise by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Squared by Thrive Themes WordPress theme before 2.0.0, Voice WordPress theme before 2.0.0, Performag by Thrive Themes WordPress theme before 2.0.0, Pressive by Thrive Themes WordPress theme before 2.0.0, Storied by Thrive Themes WordPress theme before 2.0.0, Thrive Themes Builder WordPress theme before 2.2.4 register a REST API endpoint associated with Zapier functionality. While this endpoint was intended to require an API key in order to access, it was possible to access it by supplying an empty api_key parameter in vulnerable versions if Zapier was not enabled. Attackers could use this endpoint to add arbitrary data to a predefined option in the wp_options table.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Thrive Optimize

Vendor: Thrive Themes
Product: Thrive Optimize
Platforms: Unknown
Default status: Unknown

Thrive Optimize · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.4.13.3	`affected`	custom	1.4.13.3	Unavailable	None listed

Thrive Comments

Vendor: Thrive Themes
Product: Thrive Comments
Platforms: Unknown
Default status: Unknown

Thrive Comments · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.4.15.3	`affected`	custom	1.4.15.3	Unavailable	None listed

Thrive Headline Optimizer

Vendor: Thrive Themes
Product: Thrive Headline Optimizer
Platforms: Unknown
Default status: Unknown

Thrive Headline Optimizer · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.3.7.3	`affected`	custom	1.3.7.3	Unavailable	None listed

Thrive Leads

Vendor: Thrive Themes
Product: Thrive Leads
Platforms: Unknown
Default status: Unknown

Thrive Leads · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.3.9.4	`affected`	custom	2.3.9.4	Unavailable	None listed

Thrive Ultimatum

Vendor: Thrive Themes
Product: Thrive Ultimatum
Platforms: Unknown
Default status: Unknown

Thrive Ultimatum · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.3.9.4	`affected`	custom	2.3.9.4	Unavailable	None listed

Thrive Quiz Builder

Vendor: Thrive Themes
Product: Thrive Quiz Builder
Platforms: Unknown
Default status: Unknown

Thrive Quiz Builder · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.3.9.4	`affected`	custom	2.3.9.4	Unavailable	None listed

Thrive Apprentice

Vendor: Thrive Themes
Product: Thrive Apprentice
Platforms: Unknown
Default status: Unknown

Thrive Apprentice · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.3.9.4	`affected`	custom	2.3.9.4	Unavailable	None listed

Thrive Visual Editor

Vendor: Thrive Themes
Product: Thrive Visual Editor
Platforms: Unknown
Default status: Unknown

Thrive Visual Editor · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.6.7.4	`affected`	custom	2.6.7.4	Unavailable	None listed

Thrive Dashboard

Vendor: Thrive Themes
Product: Thrive Dashboard
Platforms: Unknown
Default status: Unknown

Thrive Dashboard · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.3.9.3	`affected`	custom	2.3.9.3	Unavailable	None listed

Thrive Ovation

Vendor: Thrive Themes
Product: Thrive Ovation
Platforms: Unknown
Default status: Unknown

Thrive Ovation · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.4.5	`affected`	custom	2.4.5	Unavailable	None listed

Thrive Clever Widgets

Vendor: Thrive Themes
Product: Thrive Clever Widgets
Platforms: Unknown
Default status: Unknown

Thrive Clever Widgets · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.57.1	`affected`	custom	1.57.1	Unavailable	None listed

Rise by Thrive Themes

Vendor: Thrive Themes
Product: Rise by Thrive Themes
Platforms: Unknown
Default status: Unknown

Rise by Thrive Themes · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	custom	2.0.0	Unavailable	None listed

Ignition by Thrive Themes

Vendor: Thrive Themes
Product: Ignition by Thrive Themes
Platforms: Unknown
Default status: Unknown

Ignition by Thrive Themes · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	custom	2.0.0	Unavailable	None listed

Luxe by Thrive Themes

Vendor: Thrive Themes
Product: Luxe by Thrive Themes
Platforms: Unknown
Default status: Unknown

Luxe by Thrive Themes · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	custom	2.0.0	Unavailable	None listed

FocusBlog by Thrive Themes

Vendor: Thrive Themes
Product: FocusBlog by Thrive Themes
Platforms: Unknown
Default status: Unknown

FocusBlog by Thrive Themes · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	custom	2.0.0	Unavailable	None listed

Minus by Thrive Themes

Vendor: Thrive Themes
Product: Minus by Thrive Themes
Platforms: Unknown
Default status: Unknown

Minus by Thrive Themes · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	custom	2.0.0	Unavailable	None listed

Squared by Thrive Themes

Vendor: Thrive Themes
Product: Squared by Thrive Themes
Platforms: Unknown
Default status: Unknown

Squared by Thrive Themes · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	custom	2.0.0	Unavailable	None listed

Voice

Vendor: Thrive Themes
Product: Voice
Platforms: Unknown
Default status: Unknown

Voice · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	custom	2.0.0	Unavailable	None listed

Performag by Thrive Themes

Vendor: Thrive Themes
Product: Performag by Thrive Themes
Platforms: Unknown
Default status: Unknown

Performag by Thrive Themes · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	custom	2.0.0	Unavailable	None listed

Pressive by Thrive Themes

Vendor: Thrive Themes
Product: Pressive by Thrive Themes
Platforms: Unknown
Default status: Unknown

Pressive by Thrive Themes · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	custom	2.0.0	Unavailable	None listed

Storied by Thrive Themes

Vendor: Thrive Themes
Product: Storied by Thrive Themes
Platforms: Unknown
Default status: Unknown

Storied by Thrive Themes · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.0.0	`affected`	custom	2.0.0	Unavailable	None listed

Thrive Themes Builder

Vendor: Thrive Themes
Product: Thrive Themes Builder
Platforms: Unknown
Default status: Unknown

Thrive Themes Builder · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.2.4	`affected`	custom	2.2.4	Unavailable	None listed