Access violation vulnerability in Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN 3.9.1

The Hummingbird plugin for WordPress has a security issue that allows people to change data without permission. This is because it doesn’t check if someone has the right ability before using the clear_module_cache() function. This problem exists in versions 3.9.1 and below. This means that people who are logged in and have at least contributor-level access can delete the module cache without permission.