CVE-2026-59535

Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions.

Credits

Austin Ginder | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/thrive-product-manager/vulnerability/wordpress-thrive-product-manager-plugin-10-9-2-broken-access-control-vulnerability?_s_id=cve