plugin

Thrivedesk Vulnerabilities

2 known security issues reported for the Thrivedesk WordPress plugin. Most recent disclosed Jul 10, 2026.

2 medium

Running Thrivedesk on your site? Check whether your installed version is affected.

Scan your site free

ThriveDesk <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Cache Deletion

medium

The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is vulnerable to unauthorized cache deletion due to a missing capability check on the 'thrivedesk_clear_cache' AJAX action in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with Subscrib...

CVSS:
4.3
Affected:
up to 2.1.7
Fixed in:
2.2.0
Disclosed:
Jul 10, 2026

CVE-2026-1832 on NVD →

WordPress Helpdesk & Live Chat Plugin Powered by AI – ThriveDesk <= 2.0.6 - Reflected Cross-Site Scripting

medium

The WordPress Helpdesk & Live Chat Plugin Powered by AI – ThriveDesk plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web s...

CVSS:
6.1
Affected:
up to 2.0.6
Fixed in:
2.0.7
Disclosed:
Nov 11, 2024

CVE-2025-24536 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database