Read the docs

Incsub

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Incsub records in CISA KEV

No Incsub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Forminator 20 records MEDIUM Hummingbird 4 records HIGH Hustle 2 records MEDIUM Buddypress-activity-plus 1 record LOW

Records

4 records in Hummingbird · all components

TI-2023-01397 CVE-2023-1478 · GHSA-6686-jvr4-7m78

Hummingbird < 3.4.2 - Unauthenticated Path Traversal

Priority HIGH 82

The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writing them, leading to a path traversal vulnerability in the page cache module.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01119 Published 2023-04-10 Fixed in 3.4.2 CWE-22
TI-2024-28789 CVE-2024-43118 · GHSA-x74w-g7rj-ppw4

WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.9.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00551 Published 2024-11-01 No fix listed CWE-862
TI-2022-00893 CVE-2022-0994 · GHSA-fw4c-rcwv-gpjf

Hummingbird < 3.3.2 - Admin+ Stored Cross-Site Scripting

Priority LOW 27

The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.02793 Published 2022-04-18 Fixed in 3.3.2 CWE-79
TI-2024-21666 CVE-2024-32792 · GHSA-hx5x-rgv9-vcw4

WordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.7.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00283 Published 2024-06-09 No fix listed CWE-862
Open these records in search →