WordPress security by component

Breeze Cache

Plugin description

Breeze Cache is a WordPress component with 9 published CVE records in this archive. The latest tracked vulnerability was published May 29, 2026; the highest CVE/CNA score is 9.8.

Plugin slug: breeze

Latest vulnerability

CVE-2026-2128: Breeze Cache: A security weakness

Breeze Cache is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.5.2.

PublishedMay 29, 2026

Known safe version> 2.5.2

		Safe version
May 29, 2026	CVE-2026-2128 Breeze Cache: A security weakness Breeze Cache is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.5.2.	> 2.5.2	CVE5.3 NVDPending
Apr 23, 2026	CVE-2026-3844 Breeze Cache: Dangerous file upload Breeze Cache is affected by dangerous file upload. The vulnerable path is reachable without authentication. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise. The published affected range is <= 2.4.4.	> 2.4.4	CVE9.8 NVDPending
Feb 19, 2026	CVE-2025-13864 Breeze - WordPress Cache Plugin: A security weakness Breeze - WordPress Cache Plugin is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Jan 06, 2026	CVE-2025-69364 Breeze: A security weakness Breeze is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Jun 18, 2025	CVE-2025-23999 Breeze: A security weakness Breeze is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVDPending
Oct 29, 2024	CVE-2024-50422 Breeze: A security weakness Breeze is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Oct 28, 2024	CVE-2024-50431 Breeze: Cross-site scripting Breeze is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE5.9 NVDPending
Mar 27, 2024	CVE-2024-27188 Breeze: Cross-site scripting Breeze is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE5.9 NVDPending
May 02, 2022	CVE-2022-29444 Breeze: Cross-site scripting Breeze is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.5 NVD5.4