Skip to content
OpenAdvisories

Vendor

Cloudways

10 known vulnerabilities.

Products

Breeze 6 Breeze Cache 3 Breeze (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-2128

    Breeze Cache <= 2.5.2 - Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login Cookie

    The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to improper verification of the `wordpress_logged_in_` cookie in the `inc/cache/execute-cache.p…

    Cloudways Breeze Cache Web / CMS
  • Medium 5.3
    CVE-2025-13864

    Breeze – WordPress Cache Plugin <= 2.2.21 - Missing Authorization to Cache Deletion

    The Breeze - WordPress Cache Plugin plugin for WordPress is vulnerable to unauthorized cache clearing in all versions up to, and including, 2.2.21. This is due to the REST API endpoint `/wp-json/breeze/v1/clear-all-cache` being registered with `permission_cal…

    Cloudways Breeze Cache Web / CMS
  • Medium 5.3
    CVE-2025-69364

    WordPress Breeze plugin <= 2.2.21 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.2.21.

    Cloudways Breeze
  • Medium 4.3
    CVE-2025-23999

    WordPress Breeze plugin <= 2.2.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.2.13.

    Cloudways Breeze
  • Medium 5.3
    CVE-2024-50422

    WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.1.14.

    Cloudways Breeze
  • Medium 5.9
    CVE-2024-50431

    WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze breeze allows Stored XSS.This issue affects Breeze: from n/a through <= 2.1.14.

    Cloudways Breeze
  • Medium 5.9
    CVE-2024-27188

    WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze breeze.This issue affects Breeze: from n/a through <= 2.1.3.

    Cloudways Breeze
  • Medium 6.5
    CVE-2022-29444

    WordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability

    Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability in Cloudways Breeze plugin <= 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wp_ajax_* actions in the class Breeze_Configuration which incl…

    Cloudways Breeze (WordPress plugin) Web / CMS