High · 7.3 CVE-2026-59535 EUVD-2026-49211GHSA-69qp-4jx5-xv9x

WordPress Thrive Product Manager plugin <= 10.9.2 - Broken Access Control vulnerability

Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack

Vendor: Thrive Themes Coupon Product: Thrive Product Manager

Description

Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions.

Affected products

Vendor	Product	Affected	Fixed
Thrive Themes Coupon	Thrive Product Manager	≤ 10.9.2	—

References

https://patchstack.com/database/wordpress/plugin/thrive-product-manager/vulnerability/wordpress-thrive-product-manager-plugin-10-9-2-broken-access-control-vulnerability?_s_id=cve vdb-entry