Unknown Breeze Cache vulnerabilities

3 CVEs affecting Unknown Breeze Cache, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-79713, published 2026-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-79706, published 2026-08-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to…
CVE-2026-79713, published 2026-09-18. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing…
CVE-2026-10551, published 2026-07-13. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) due to a predictable replacement hash used during the HTML minification process and…