Skip to content
PluginCanary

Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN

by WPMU DEV - Your All-in-One WordPress Platform · 70,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 4 Sep 2026, fixed in 3.21.1.

86/ 100 Canary Score
Sub-scores for Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN
Ownership100
Maintenance100
Security70
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 3.21.1. Update to version 3.21.1 or later.4 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 3.21.2. Update to version 3.21.2 or later.4 Sep 2026Evidence
  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
jdailey9 Jun 2017 to 16 Mar 2020, 33 commits
vanyukov18 Jul 2017 to 6 Jun 2022, 48 commits
rickjc893 Nov 2020 to 30 Mar 2021, 2 commits
khaxan5 Jul 2022 to 3 Nov 2026, 60 commits

4 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
today
Releases, 24 months
15
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN
Q1 20243
Q2 20242
Q3 20245
Q4 20242
Q1 20252
Q2 20252
Q3 20252
Q4 20254
Q1 20261
Q2 20260
Q3 20262
Q4 20261

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
4 Sep 2026Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via Cookie Name in Page Cache Debug Log9.8<= 3.21.03.21.1n/a
4 Sep 2026Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN < 3.21.2 - Authenticated (Administrator+) Remote Code Execution7.2< 3.21.23.21.20
17 Dec 2025Hummingbird <= 3.18.0 - Unauthenticated Sensitive Information Exposure via Log File7.5<= 3.18.03.18.10
7 Aug 2024Hummingbird <= 3.9.1 - Cross-Site Request Forgery4.3<= 3.9.13.9.20
7 Aug 2024Hummingbird <= 3.9.1 - Missing Authorization4.3<= 3.9.13.9.20
22 Apr 2024Hummingbird <= 3.7.3 - Missing Authorization5.3<= 3.7.33.7.40
20 Mar 2023Hummingbird <= 3.4.1 - Unauthenticated Path Traversal5.3<= 3.4.13.4.20
23 Mar 2022Hummingbird <= 3.3.1 - Admin+ Stored Cross-Site Scripting5.5< 3.3.23.3.20

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN
Q2 20244.3
Q3 20244.4
Q4 20243.7
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20253.5
Q2 20264.0
Q4 20265.0

Average rating rose from 4.3 to 5.0 between Q2 2024 and Q4 2026.

Rating distribution
5 star1319
4 star81
3 star22
2 star14
1 star52
Latest low reviews

Momentum

70,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN
4 May 20261,262
11 May 20263,888
18 May 20264,080
25 May 20263,800
1 Jun 20262,740
8 Jun 20262,258
15 Jun 20262,292
22 Jun 20262,503
29 Jun 20261,987
6 Jul 20261,983
13 Jul 20262,370
20 Jul 202638,910
27 Jul 20266,012
3 Aug 20266,666
10 Aug 20263,712
17 Aug 20263,866
24 Aug 20264,040
31 Aug 202641,904
7 Sep 20266,401
14 Sep 20266,410
21 Sep 20265,202
28 Sep 20263,920
5 Oct 20263,206
12 Oct 20262,867
19 Oct 20264,753
26 Oct 20263,072
2 Nov 2026506

Weekly downloads over the last 4 weeks are 56% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Super Page Cache - Cloudflare Cache, Page Speed & Core Web VitalsScore 95 · 70,000+WP Super CacheScore 93 · 1,000,000+Nginx HelperScore 91 · 200,000+SpinupWPScore 91 · 30,000+Instant Back/ForwardScore 91 · 10,000+

Facts

Version4.0.0
AuthorWPMU DEV - Your All-in-One WordPress Platform
Added9 Jun 2017
Last updated3 Nov 2026
Active installs70,000+
Requires WordPress6.4
Tested up to7.1.4
Requires PHP7.4
CategoryPerformance & Optimization > Caching Solutions
Tagscache, caching, minify css, performance, Critical CSS

Other plugins by this author: Smush - Image Optimization, Compression, Lazy Load, WebP & CDN, Forminator Forms - Contact Form, Payment Form & Custom Form Builder, Broken Link Checker, Defender Security - Malware Scanner, Login Security & Firewall, Hustle - Email Marketing, Lead Generation, Optins, Popups, Beehive Analytics - Google Analytics Dashboard, SmartCrawl SEO checker, analyzer & optimizer, Branda - White Label & Branding, Free Login Page Customizer

Questions

Is Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN still maintained?

Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN safe?

Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN?

The wordpress.org author is WPMU DEV - Your All-in-One WordPress Platform. Recent committers: khaxan, vanyukov, rickjc89, jdailey, WPMUDEV. We have recorded no ownership change.

What can I use instead of Hummingbird Performance - Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN?

Plugins in the same category with a higher Canary Score: Super Page Cache - Cloudflare Cache, Page Speed & Core Web Vitals, WP Super Cache, Nginx Helper, SpinupWP, Instant Back/Forward.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue