CVE-2023-1478

The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writing them, leading to a path traversal vulnerability in the page cache module.

Score

CVSS 3.1 9.8 Critical

Status

Modified - contact@wpscan.com

Published

2023-04-10

Last modified

2025-02-11

Weaknesses

CWE-22

Affected products

• Hummingbird (Incsub)
• Hummingbird (Unknown)

References

• https://wpscan.com/vulnerability/512a9ba4-01c0-4614-a991-efdc7fe51abe