Plugin icon

Breeze Cache

breeze

Vulnerabilities:

11

Last Updated:

August 10, 2026

Active Installs:

400000

Published
Title
Fixed in
CVSS
Published
2026-08-14
Title
Breeze Cache < 2.5.13 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Fixed in
Fixed in 2.5.13
CVSS
5.3 (medium)
Published
2026-06-22
Title
Breeze Cache < 2.5.6 - Unauthenticated Stored XSS via Minify Library
Fixed in
Fixed in 2.5.6
CVSS
8.8 (high)
Published
2026-05-28
Title
Breeze Cache < 2.5.3 - Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login Cookie
Fixed in
Fixed in 2.5.3
CVSS
5.3 (medium)
Published
2026-04-22
Title
Breeze Cache < 2.4.5 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 2.4.5
CVSS
9.8 (critical)
Published
2026-02-18
Title
Breeze – WordPress Cache Plugin < 2.2.22 - Missing Authorization to Cache Deletion
Fixed in
Fixed in 2.2.22
CVSS
5.3 (medium)
Published
2026-01-13
Title
Breeze < 2.2.22 - Missing Authorization
Fixed in
Fixed in 2.2.22
CVSS
5.3 (medium)
Published
2025-06-18
Title
Breeze < 2.2.14 - Missing Authorization
Fixed in
Fixed in 2.2.14
CVSS
4.3 (medium)
Published
2024-10-24
Title
Breeze < 2.1.15 - Missing Authorization
Fixed in
Fixed in 2.1.15
CVSS
5.3 (medium)
Published
2024-10-24
Title
Breeze < 2.1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.15
CVSS
4.4 (medium)
Published
2024-03-25
Title
Breeze < 2.1.4 - Admin+ Stored XSS
Fixed in
Fixed in 2.1.4
CVSS
3.5 (low)
Published
2022-05-02
Title
Breeze < 2.0.3 - Subscriber+ Arbitrary Settings Update to Stored XSS
Fixed in
Fixed in 2.0.3
CVSS
8.0 (high)