Hummingbird Security Vulnerabilities and Issues — Hummingbird CVE List

Lucene search

IncsubHummingbird

4 matches found

CVE•added 2023/04/10 2:15 p.m.•102 views

CVE-2023-1478

The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writing them, leading to a path traversal vulnerability in the page cache module.

9.8CVSS9.5AI score0.00475EPSS

CVE•added 2022/04/18 6:15 p.m.•73 views

CVE-2022-0994

The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

4.8CVSS4.8AI score0.00195EPSS

CVE•added 2024/06/09 1:15 p.m.•51 views

CVE-2024-32792

Missing Authorization vulnerability in WPMU DEV Hummingbird.This issue affects Hummingbird: from n/a through 3.7.3.

5.3CVSS4.6AI score0.00116EPSS

CVE•added 2024/11/01 3:15 p.m.•35 views

CVE-2024-43118

Missing Authorization vulnerability in WPMU DEV Hummingbird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hummingbird: from n/a through 3.9.1.

8.8CVSS4.6AI score0.00242EPSS