Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN vulnerabilities

2 known vulnerabilities in Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN from Wpmudev. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Hummingbird Performance – Cache & Page Speed…: Improper Control of Generation of Code

  CVE-2026-83627Sep 5, 2026WpmudevEPSS 1.43%

  The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.21.0 via the log_msg() function in core/modules/class-page-cache.php. The page-cache debug

• 7.5 High severity

  Hummingbird Performance – Cache & Page Speed…: Insertion of Sensitive Information into Log File

  CVE-2025-14437Dec 18, 2025WpmudevEPSS 1.83%

  The Hummingbird Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.18.0 via the 'request' function. This makes it possible for unauthenticated attackers to extract sensitive data including C