CVE-2026-59544

Thrive Quiz Builder versions up to 10.9.3.0 are vulnerable to unauthenticated PHP Object Injection, allowing attackers to exploit this flaw without authentication. This critical vulnerability could lead to remote code execution, enabling unauthorized access and manipulation of the affected systems. Organizations using this plugin should prioritize immediate patching to mitigate potential risks.