Cloudways Breeze vulnerabilities

• cloudways breeze cache Breeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters CVE-2026-79713 6.5 MediumSeptember 18, 2026
• cloudways breeze cache Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal CVE-2026-79706 5.3 MediumAugust 28, 2026
• cloudways breeze WordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerability CVE-2026-73356 8.2 HighAugust 18, 2026
• cloudways breeze cache Breeze Cache < 2.5.6 - Unauthenticated Stored XSS via Minify Library CVE-2026-10551 6.1 MediumJuly 13, 2026
• cloudways breeze cache Breeze Cache <= 2.5.2 - Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login Cookie CVE-2026-2128 5.3 MediumMay 29, 2026
• cloudways breeze cache Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote CVE-2026-3844 Public exploit EPSS 27.7% 9.8 CriticalApril 23, 2026
• cloudways breeze cache Breeze – WordPress Cache Plugin <= 2.2.21 - Missing Authorization to Cache Deletion CVE-2025-13864 5.3 MediumFebruary 19, 2026
• cloudways breeze WordPress Breeze plugin <= 2.2.21 - Broken Access Control vulnerability CVE-2025-69364 5.3 MediumJanuary 6, 2026
• cloudways breeze WordPress Breeze plugin <= 2.2.13 - Broken Access Control vulnerability CVE-2025-23999 4.3 MediumJune 18, 2025
• cloudways breeze WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability CVE-2024-50422 5.3 MediumOctober 29, 2024
• cloudways breeze WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability CVE-2024-50431 5.9 MediumOctober 28, 2024
• cloudways breeze WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-27188 5.9 MediumMarch 27, 2024
• cloudways breeze, breeze (wordpress plugin) +1 more WordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability CVE-2022-29444 6.5 MediumMay 2, 2022