WordPress Hummingbird Vulnerabilities

Wordpress Hummingbird vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

9 November 2026

Cross-site Scripting Vulnerability in WPMU DEV Hummingbird Performance Plugin
CVE-2026-121763
WordPressHummingbird6.5MEDIUM

5 September 2026

Remote Code Execution Vulnerability in Hummingbird Plugin from WordPress
CVE-2026-83627
WordPressHummingbird Performanc...9.8CRITICAL

4 September 2026

Arbitrary Code Execution Vulnerability in Hummingbird Performance Plugin for WordPress
CVE-2026-19224
WordPressHummingbird Performance👾🟡7.2HIGH

18 December 2025

Sensitive Information Exposure in Hummingbird Performance Plugin by WordPress
CVE-2025-14437
WordPressHummingbird Performanc...7.5HIGH

1 November 2024

WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability
CVE-2024-43118
WordPressHummingbird4.3MEDIUM

26 August 2024

CSRF Vulnerability in WPMU DEV Hummingbird (N/A - 3.9.1)
CVE-2024-43117
WordPressHummingbird4.3MEDIUM

9 June 2024

Missing Authorization Vulnerability Affects Hummingbird
CVE-2024-32792
WordPressHummingbird4.3MEDIUM

10 April 2023

Hummingbird < 3.4.2 - Unauthenticated Path Traversal
CVE-2023-1478
WordpressHummingbird👾🟡9.8CRITICAL

18 April 2022

Hummingbird < 3.3.2 - Admin+ Stored Cross-Site Scripting
CVE-2022-0994
WordpressHummingbird – Optimize...4.8MEDIUM