{"uuid": "41badb06-51a8-4217-8909-a131e83394a9", "vulnerability": {"vulnId": "CVE-2021-24219", "altId": []}, "gcve": {"origin_uuid": "caeb2787-0d58-4236-9039-7c86c3e566f3", "object_uuid": "41badb06-51a8-4217-8909-a131e83394a9"}, "status": {"exploited": true, "status_reason": "confirmed", "status_updated_at": "2021-03-24T10:36:04+00:00"}, "timestamps": {"asserted_at": "2021-03-24T10:36:04+00:00", "recorded_at": "2026-06-23T11:11:17+00:00", "first_seen_at": "2021-03-24T10:36:04+00:00"}, "scope": {"notes": "KEVIntel entry: All Thrive Themes and Plugins - Unauthenticated Option Update | Affected: Thrive Themes / Thrive Optimize, Thrive Comments, Thrive Headline Optimizer, Thrive Leads, Thrive Ultimatum, Thrive Quiz Builder, Thrive Apprentice, Thrive Visual Editor, Thrive Dashboard, Thrive Ovation, Thrive Clever Widgets, Rise by Thrive Themes, Ignition by Thrive Themes, Luxe by Thrive Themes, FocusBlog by Thrive Themes, Minus by Thrive Themes, Squared by Thrive Themes, Voice, Performag by Thrive Themes, Pressive by Thrive Themes, Storied by Thrive Themes, Thrive Themes Builder | CVSS: 5.3 (MEDIUM) | EPSS: 0.00178 | Used in malware: unknown | Not yet in CISA KEV: True"}, "evidence": [{"type": "public_report", "source": "kevintel", "signal": "successful_exploitation", "confidence": 0.7, "details": {"feed": "KEVIntel (kevintel.com)", "title": "All Thrive Themes and Plugins - Unauthenticated Option Update", "vendor": "Thrive Themes", "product": "Thrive Optimize, Thrive Comments, Thrive Headline Optimizer, Thrive Leads, Thrive Ultimatum, Thrive Quiz Builder, Thrive Apprentice, Thrive Visual Editor, Thrive Dashboard, Thrive Ovation, Thrive Clever Widgets, Rise by Thrive Themes, Ignition by Thrive Themes, Luxe by Thrive Themes, FocusBlog by Thrive Themes, Minus by Thrive Themes, Squared by Thrive Themes, Voice, Performag by Thrive Themes, Pressive by Thrive Themes, Storied by Thrive Themes, Thrive Themes Builder", "added_date": "2021-03-24T10:36:04.000Z", "cvss_score": 5.3, "epss_score": 0.00178, "cvss_severity": "MEDIUM", "epss_percentile": 0.40013, "used_in_malware": "unknown", "ahead_of_cisa_kev": null, "not_yet_in_cisa_kev": true}}], "references": [{"id": "CVE-2021-24219", "url": "https://www.cve.org/CVERecord?id=CVE-2021-24219"}, {"id": "kevintel", "url": "https://kevintel.com/vuln/CVE-2021-24219"}]}
