Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-121763 EUVD-2026-119919GHSA-px39-gfrj-xcc8

WordPress Hummingbird plugin <= 3.21.2 - Cross Site Scripting (XSS) vulnerability

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Hummingbird hummingbird-performance allows Stored XSS.This issue affects Hummingbird: from n/a through 3.21.2.

Affected products

VendorProductAffectedFixed
WPMU DEV Hummingbird ≤ 3.21.2 —

References