THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-83627 (CRITICAL 9.8) — The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.21.0 via the log_msg() function in core/modules/class-page-cache.php. The page-cache debug log is written to w

[NVD] CVE-2026-83627 (CRITICAL 9.8) — The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.21.0 via the log_msg() function in core/modules/class-page-cache.php. The page-cache debug log is written to w

mednvdPublished 2026-09-05

CVE-2026-83627 CVSS: 9.8 CRITICAL Published: 2026-09-05T06:17:10.080

The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.21.0 via the log_msg() function in core/modules/class-page-cache.php. The page-cache debug log is written to wp-content/wphb-logs/page-caching-log.php, a direct

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-83627