Skip to content
OpenAdvisories

Vendor

Cloudways

10 known vulnerabilities.

Products

Breeze 6 Breeze Cache 3 Breeze (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-3844 Public exploit EPSS 28%

    Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote

    The Breeze Cache plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fetch_gravatar_from_remote' function in all versions up to, and including, 2.4.4. This makes it possible for unauthenticated attackers to…

    Cloudways Breeze Cache Web / CMS