CVE-2024-12206

creationtimestamp| type| source ---|---|--- 2025-01-09 11:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgqhamc2i 2025-01-09 11:44:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113798223191041662 2025-01-09 12:16:33+00:00|...

CVE-2024-12206 Wordpress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header Deletion

The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing or incorrect nonce validation on the stmheaderbuilder page. This makes it possible for unauthenticated attackers to dele...

CVE-2024-12206 Wordpress Header Builder Plugin <= 1.3.8 - Cross-Site Request Forgery to Header Deletion

The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing or incorrect nonce validation on the stmheaderbuilder page. This makes it possible for unauthenticated attackers to dele...