Skip to content
OpenAdvisories

Product · Cloudways

Breeze Cache

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3

    Breeze Cache <= 2.5.2 - Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login Cookie

    The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to improper verification of the `wordpress_logged_in_` cookie in the `inc/cache/execute-cache.p…

  • Medium 5.3

    Breeze – WordPress Cache Plugin <= 2.2.21 - Missing Authorization to Cache Deletion

    The Breeze - WordPress Cache Plugin plugin for WordPress is vulnerable to unauthorized cache clearing in all versions up to, and including, 2.2.21. This is due to the REST API endpoint `/wp-json/breeze/v1/clear-all-cache` being registered with `permission_cal…