Medium · 5.4 CVE-2022-38356 EUVD-2022-40945GHSA-9xp8-pcv7-w85f

WordPress Pearl Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

Published May 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in StylemixThemes WordPress Header Builder Plugin – Pearl plugin <= 1.3.4 versions.

Vendor	Product	Affected	Fixed
StylemixThemes	WordPress Header Builder Plugin – Pearl	≤ 1.3.4	—