WordPress Header Builder Plugin – Pearl, CVE-2024-5468

CVE, Research URL: CVE-2024-5468
Home page URL: Security reports for WordPress Header Builder Plugin – Pearl
Application: WordPress Header Builder Plugin – Pearl
Published on: Jun 12, 2024
Research Description: The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized site option deletion due to a missing validation and capability checks on the stm_hb_delete() function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to delete arbitrary options that can be used to perform a denial of service attack on a site.
Affected versions: Min -, max 1.3.8.
Status: vulnerable