Cloudways
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Breeze | 6 | – | Aug 18, 2026 |
| Breeze Cache | 3 | – | May 29, 2026 |
| Breeze (WordPress plugin) | 1 | – | May 2, 2022 |
Exploited and recent CVEs
- CVE-2026-73356 WordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerability 0.4%
- CVE-2026-2128 Breeze Cache <= 2.5.2 - Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login Cookie 0.3%
- CVE-2026-3844 Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote 27.7%
- CVE-2025-13864 Breeze – WordPress Cache Plugin <= 2.2.21 - Missing Authorization to Cache Deletion 0.4%
- CVE-2025-69364 WordPress Breeze plugin <= 2.2.21 - Broken Access Control vulnerability 0.3%
- CVE-2025-23999 WordPress Breeze plugin <= 2.2.13 - Broken Access Control vulnerability 0.3%
- CVE-2024-50422 WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability 0.6%
- CVE-2024-50431 WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-27188 WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2022-29444 WordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability 0.6%