CVE:CVE-2021-24219
CNNVD:CNNVD-202104-676
WordPress 插件是WordPress开源的一个应用插件。
多款Wordpress插件存在安全漏洞，该漏洞允许攻击者使用此端点将任意数据添加到wp_options表中的预定义选项。以下产品及版本受到影响：The Thrive Optimize WordPress plugin 1.4.13.3版本之前，Thrive Comments WordPress plugin 1.4.15.3版本之前，Thrive Headline Optimizer WordPress plugin 1.3.7.3版本之前，Thrive Leads WordPress plugin 2.3.9.4版本之前，Thrive Ultimatum WordPress plugin 2.3.9.4版本之前，Thrive Quiz Builder WordPress plugin 2.3.9.4版本之前，Thrive Apprentice WordPress plugin 2.3.9.4版本之前，Thrive Visual Editor WordPress plugin 2.6.7.4版本之前，Thrive Dashboard WordPress plugin 2.3.9.3版本之前，Thrive Ovation WordPress plugin 2.4.5版本之前，Thrive Clever Widgets WordPress plugin 1.57.1 and Rise by Thrive Themes WordPress theme 2.0.0版本之前，Ignition by Thrive Themes WordPress theme 2.0.0版本之前，Luxe by Thrive Themes WordPress theme 2.0.0版本之前，FocusBlog by Thrive Themes WordPress theme 2.0.0版本之前，Minus by Thrive Themes WordPress theme 2.0.0版本之前，Squared by Thrive Themes WordPress theme 2.0.0版本之前，Voice WordPress theme 2.0.0版本之前，Performag by Thrive Themes WordPress theme 2.0.0版本之前，Pressive by Thrive Themes WordPress theme 2.0.0版本之前，Storied by Thrive Themes WordPress theme 2.0.0版本之前，Thrive Themes Builder WordPress theme 2.2.4版本之前。
solution:Upgrade thrivethemes focusblog to a higher version than 2.0.0,and avoid the version (,2.0.0); Upgrade thrivethemes ignition to a higher version than 2.0.0,and avoid the version (,2.0.0); Upgrade thrivethemes luxe to a higher version than 2.0.0,and avoid the version (,2.0.0); Upgrade thrivethemes minus to a higher version than 2.0.0,and avoid the version (,2.0.0); Upgrade thrivethemes performag to a higher version than 2.0.0,and avoid the version (,2.0.0); Upgrade thrivethemes pressive to a higher version than 2.0.0,and avoid the version (,2.0.0); Upgrade thrivethemes rise to a higher version than 2.0.0,and avoid the version (,2.0.0); Upgrade thrivethemes squared to a higher version than 2.0.0,and avoid the version (,2.0.0); Upgrade thrivethemes storied to a higher version than 2.0.0,and avoid the version (,2.0.0); Upgrade thrivethemes thrive_apprentice to a higher version than 2.3.9.4,and avoid the version (,2.3.9.4); Upgrade thrivethemes thrive_clever_widgets to a higher version than 1.57.1,and avoid the version (,1.57.1); Upgrade thrivethemes thrive_comments to a higher version than 1.4.15.3,and avoid the version (,1.4.15.3); Upgrade thrivethemes thrive_dashboard to a higher version than 2.3.9.3,and avoid the version (,2.3.9.3); Upgrade thrivethemes thrive_headline_optimizer to a higher version than 1.3.7.3,and avoid the version (,1.3.7.3); Upgrade thrivethemes thrive_optimize to a higher version than 1.4.13.3,and avoid the version (,1.4.13.3); Upgrade thrivethemes thrive_ovation to a higher version than 2.4.5,and avoid the version (,2.4.5); Upgrade thrivethemes thrive_quiz_builder to a higher version than 2.3.9.4,and avoid the version (,2.3.9.4); Upgrade thrivethemes thrive_themes_builder to a higher version than 2.2.4,and avoid the version (,2.2.4); Upgrade thrivethemes thrive_visual_editor to a higher version than 2.6.7.4,and avoid the version (,2.6.7.4); Upgrade thrivethemes voice to a higher version than 2.0.0,and avoid the version (,2.0.0)