CVE Catalog
CVE-2026-59544
CriticalCVSS 9.8Summary
The Thrive Quiz Builder plugin versions up to 10.9.3.0 are vulnerable to unauthenticated PHP object injection.
Risk Assessment
An unauthenticated attacker can inject malicious PHP objects, potentially leading to remote code execution or data integrity compromise.
Recommendation
It is recommended to update the Thrive Quiz Builder plugin to a version later than 10.9.3.0.
Original NVD description (English source)
Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.