CVE-2023-47782 HIGH

CVE-2023-47782: WordPress Thrive Theme Builder theme < 3.24.0 - Authenticated Privilege Escalation vulnerability

Vendor Thrive Themes

Product Thrive Theme Builder

Weakness CWE-269

Published May 17, 2024

Last update April 28, 2026

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Improper Privilege Management vulnerability in Thrive Themes Thrive Theme Builder allows Privilege Escalation.This issue affects Thrive Theme Builder: from n/a before 3.24.0.

Explanation of Vulnerability in Simple Terms

02Summary

Thrive Theme Builder versions before 3.24.0 contain a privilege management flaw that allows authenticated users with low-level access to perform actions reserved for higher-privilege roles. An attacker with a basic user account can read, modify, or delete sensitive site data and functionality without proper authorization checks. This affects all installations running the vulnerable version.

What an attacker can do

03Attacker Capabilities

Read, modify, or delete site data and functionality without proper authorization.

Potential impact on your site

04Site Impact

Unauthorized users can access and alter critical site content, settings, and data.

Conditions required to exploit

05Prerequisites

Attacker must have a low-privilege authenticated user account on the site.

Key dates

06Disclosure timeline

May 17, 2024 CVE published

April 28, 2026 Record updated

External resources

07References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-47782 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/269.html AskarLabs — CWE-269 write-up Improper Privilege Management

Related vulnerabilities