CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects WordPress. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2024-5468
Severity
MEDIUM
CVSS
6.5
EPSS
0.37%
WordPress
Original NVD Description
The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized site option deletion due to a missing validation and capability checks on the stm_hb_delete() function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to delete arbitrary options that can be used to perform a denial of service attack on a site.