All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion
Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by Thrive Themes WordPress theme before 2.0.0, Voice WordPress theme before 2.0.0, Performag by Thrive Themes WordPress theme before 2.0.0, Pressive by Thrive Themes WordPress theme before 2.0.0, Storied by Thrive Themes WordPress theme before 2.0.0 register a REST API endpoint to compress images using the Kraken image optimization engine. By supplying a crafted request in combination with data inserted using the Option Update vulnerability, it was possible to use this endpoint to retrieve malicious code from a remote URL and overwrite an existing file on the site with it or create a new file.This includes executable PHP files that contain malicious code.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Rise by Thrive Themes
Vendor
Thrive Themes
Product
Rise by Thrive Themes
Platforms
Unknown
Default status
Unknown
Rise by Thrive Themes · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
custom
2.0.0
Unavailable
None listed
Luxe by Thrive Themes
Vendor
Thrive Themes
Product
Luxe by Thrive Themes
Platforms
Unknown
Default status
Unknown
Luxe by Thrive Themes · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
custom
2.0.0
Unavailable
None listed
Minus by Thrive Themes
Vendor
Thrive Themes
Product
Minus by Thrive Themes
Platforms
Unknown
Default status
Unknown
Minus by Thrive Themes · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
custom
2.0.0
Unavailable
None listed
Ignition by Thrive Themes
Vendor
Thrive Themes
Product
Ignition by Thrive Themes
Platforms
Unknown
Default status
Unknown
Ignition by Thrive Themes · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
custom
2.0.0
Unavailable
None listed
FocusBlog by Thrive Themes
Vendor
Thrive Themes
Product
FocusBlog by Thrive Themes
Platforms
Unknown
Default status
Unknown
FocusBlog by Thrive Themes · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
custom
2.0.0
Unavailable
None listed
Squared by Thrive Themes
Vendor
Thrive Themes
Product
Squared by Thrive Themes
Platforms
Unknown
Default status
Unknown
Squared by Thrive Themes · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
custom
2.0.0
Unavailable
None listed
Voice
Vendor
Thrive Themes
Product
Voice
Platforms
Unknown
Default status
Unknown
Voice · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
custom
2.0.0
Unavailable
None listed
Performag by Thrive Themes
Vendor
Thrive Themes
Product
Performag by Thrive Themes
Platforms
Unknown
Default status
Unknown
Performag by Thrive Themes · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
custom
2.0.0
Unavailable
None listed
Pressive by Thrive Themes
Vendor
Thrive Themes
Product
Pressive by Thrive Themes
Platforms
Unknown
Default status
Unknown
Pressive by Thrive Themes · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.0.0
affected
custom
2.0.0
Unavailable
None listed
Storied by Thrive Themes
Vendor
Thrive Themes
Product
Storied by Thrive Themes
Platforms
Unknown
Default status
Unknown
Storied by Thrive Themes · Scoped product and version facts