Extension WordPress
Vulnérabilités Pearl – Header Builder
Cette page rassemble les failles publiées pour Pearl – Header Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Pearl – Header Builder
6 fiches
Pearl <= 1.3.9 – Missing Authorization
The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.3.9. This makes it possible for authenticated…
*-1.3.9
1.3.10
01/04/2025
Pearl <= 1.3.9 – Cross-Site Request Forgery
The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.9. This is due to missing or incorrect nonce validation on a function. This makes…
*-1.3.9
1.3.10
01/04/2025
Wordpress Header Builder Plugin <= 1.3.8 – Cross-Site Request Forgery to Header Deletion
The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing or incorrect nonce validation on the stm_header_builder page. This…
*-1.3.8
1.3.9
08/01/2025
WordPress Header Builder Plugin – Pearl <= 1.3.7 – Missing Authorization to Unauthenticated Arbitrary Site Options Deletion
The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized site option deletion due to a missing validation and capability checks on the stm_hb_delete() function in all versions up to, and including, 1.3.7. This…
*-1.3.7
1.3.8
11/06/2024
WordPress Header Builder Plugin – Pearl <= 1.3.6 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stm_hb' shortcode in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping on…
*-1.3.6
1.3.7
30/04/2024
Pearl <= 1.3.4 – Cross-Site Request Forgery via stm_save_hb_settings
The Pearl plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.4. This is due to missing or incorrect nonce validation on the stm_save_hb_settings function. This makes it possible for unauthenticated attackers…
*-1.3.4
1.3.5
19/04/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.