Cloudways

Products

ProductCVEsExploitedLatest
Breeze6–Aug 18, 2026
Breeze Cache3–May 29, 2026
Breeze (WordPress plugin)1–May 2, 2022

Exploited and recent CVEs

  • CVE-2026-73356 High 8.2 WordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerability 0.4%
  • CVE-2026-2128 Medium 5.3 Breeze Cache <= 2.5.2 - Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login Cookie 0.3%
  • CVE-2026-3844 Critical 9.8 Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote 27.7%
  • CVE-2025-13864 Medium 5.3 Breeze – WordPress Cache Plugin <= 2.2.21 - Missing Authorization to Cache Deletion 0.4%
  • CVE-2025-69364 Medium 5.3 WordPress Breeze plugin <= 2.2.21 - Broken Access Control vulnerability 0.3%
  • CVE-2025-23999 Medium 4.3 WordPress Breeze plugin <= 2.2.13 - Broken Access Control vulnerability 0.3%
  • CVE-2024-50422 Medium 5.3 WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability 0.6%
  • CVE-2024-50431 Medium 5.9 WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-27188 Medium 5.9 WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2022-29444 Medium 6.5 WordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability 0.6%