CVE-2023-47783highexploração observadaCWE-862

CVE-2023-47783: falha de alta gravidade em Thrive Theme Builder

WordPress Thrive Theme Builder theme < 3.24.0 - Multiple Authenticated Broken Access Control vulnerability

Publicada em · Atualizada em

43Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck.

ssvc Actcvss 8.3epss 0.4%
da publicação à arma
Publicada no NVD19 de jun.
VulnCheck+684d
probabilidade de exploração
0.4%top 73% das CVEs
exploração observada
simVulnCheck
Missing Authorization vulnerability in Thrive Themes Thrive Theme Builder.This issue affects Thrive Theme Builder: from n/a before 3.24.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Produtos afetados
Thrive Themes · Thrive Theme Builder
CVEs relacionadas — Thrive Theme Builder

No mesmo produto, das mais perigosas para as menos.

CVE-2023-47782HIGHWordPress Thrive Theme Builder theme < 3.24.0 - Authenticated Privilege Escalation vulnerabilityEPSS 0.5%CVE-2023-47781HIGHWordPress Thrive Theme Builder Theme < 3.24.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%
Referências
https://patchstack.com/database/vulnerability/thrive-theme/wordpress-thrive-theme-builder-theme-3-20-1-multiple-authenticated-broken-access-control-vulnerability?_s_id=cve