9.8
Critical
CVE-2023-1478 The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before…
Description
The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writing them, leading to a path traversal vulnerability in the page cache module.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Hummingbird 3.4 | earliest → < 3.4.2 | 3.4.2 |