Description
The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writing them, leading to a path traversal vulnerability in the page cache module.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Hummingbird | < 3.4.2 | 3.4.2 |
References
- https://wpscan.com/vulnerability/512a9ba4-01c0-4614-a991-efdc7fe51abe exploit vdb-entry technical-description