CyberSecBulletin

Hiddenpearls vulnerabilities

We track 2 vulnerabilities in Hiddenpearls products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 19, 2025.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Hiddenpearls vulnerabilities

  • 7.5 High severity

    Insert Headers And Footers: Cross-Site Request Forgery

    CVE-2025-2111Hiddenpearls

    The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' function. This makes it possible

  • 7.5 High severity

    LoginPress | wp-login Custom Login Page…: Cross-Site Request Forgery

    CVE-2025-1764Hiddenpearls

    The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' function