Input validation vulnerability in WordPress Header Builder Plugin – Pearl 1.3.9

The Pearl plugin for WordPress, called the WordPress Header Builder Plugin, has a security issue known as Cross-Site Request Forgery. This problem affects all versions of the plugin up to and including version 1.3.9. The issue is caused by a function that does not properly check for a special security code, called a nonce. This means that attackers who are not logged in can make a website administrator do something they did not intend, as long as they can trick the administrator into clicking on a specific link.