CVE-2024-5468: Stylemix Pearl – Header Builder

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized site option deletion due to a missing validation and capability checks on the stm_hb_delete() function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to delete arbitrary options that can be used to perform a denial of service attack on a site.

Affected products

• Stylemix Pearl – Header Builder: up to and including 1.3.7

Published 2024-06-12. Last modified 2026-06-17.