Skip to content
Noroxi

Hummingbird

hummingbird-performance · plugin

Known security vulnerabilities for Hummingbird. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

1 critical · 1 with public exploit code · latest Sep 5, 2026

Vulnerabilities

  • CVE-2026-83627

    Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via Cookie Name in Page Cache Debug Log

    Critical 9.8

  • CVE-2024-43118

    WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability

    High 8.8

  • CVE-2024-43117

    WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability

    High 8.8

  • CVE-2025-14437

    Hummingbird <= 3.18.0 - Unauthenticated Sensitive Information Exposure via Log File

    High 7.5

  • CVE-2024-32792

    WordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability

    Medium 5.3

← Back to directory