Beveiligingsadvies

CVE-2024-5468

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-12 08:33:19

Laatst bijgewerkt 2026-04-08 17:20:16

Toegewezen door Wordfence

CVSS-score 6.5

Status PUBLISHED

Beschrijving

The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized site option deletion due to a missing validation and capability checks on the stm_hb_delete() function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to delete arbitrary options that can be used to perform a denial of service attack on a site.

← Alle CVE's bekijken Bekijk op cve.org ↗