Plugin icon

Pearl – Header Builder

pearl-header-builder

Vulnerabilities:

6

Last Updated:

August 19, 2025

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2025-04-01
Title
Pearl < 1.3.10 - Missing Authorization
Fixed in
Fixed in 1.3.10
CVSS
4.3 (medium)
Published
2025-04-01
Title
Pearl < 1.3.10 - Cross-Site Request Forgery
Fixed in
Fixed in 1.3.10
CVSS
4.3 (medium)
Published
2025-01-08
Title
Wordpress Header Builder Plugin < 1.3.9 - Cross-Site Request Forgery to Header Deletion
Fixed in
Fixed in 1.3.9
CVSS
4.3 (medium)
Published
2024-06-11
Title
WordPress Header Builder Plugin – Pearl < 1.3.8 - Missing Authorization to Unauthenticated Arbitrary Site Options Deletion
Fixed in
Fixed in 1.3.8
CVSS
6.5 (medium)
Published
2024-04-30
Title
WordPress Header Builder Plugin – Pearl < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 1.3.7
CVSS
6.4 (medium)
Published
2023-04-19
Title
Pearl < 1.3.5 - CSRF
Fixed in
Fixed in 1.3.5
CVSS
5.4 (medium)