Thrive Automator CSRF Vulnerability Affects Users
CVE-2023-51531

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Thrive Automator
Vendor
CVE Published:
29 February 2024

What is CVE-2023-51531?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Thrive Themes' Thrive Automator plugin. This security issue enables an attacker to execute unauthorized commands on behalf of an authenticated user. Successful exploitation could allow attackers to perform actions that alter the website configuration or data without the user's consent. The vulnerability affects Thrive Automator versions prior to 1.17, leaving many users at risk. It is crucial for site owners using this plugin to implement security measures and apply updates to mitigate potential threats.

Affected Version(s)

Thrive Automator <= 1.17

References

https://patchstack.com/database/vulnerability/thrive-auto...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Brandon Roldan (Patchstack Alliance)
.