Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: Cloudways Clear all filters
TI-2026-01778 CVE-2026-2128 · GHSA-mpqv-gg33-5mc7

Information disclosure in Cloudways Breeze Cache

Priority LOW 30

The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to improper verification of the `wordpress_logged_in_` c…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2026-05-29 No fix listed CWE-200
TI-2025-42807 CVE-2025-69364 · GHSA-c8cx-8q9q-hj65

WordPress Breeze plugin <= 2.2.21 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.2.21.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00267 Published 2026-01-06 No fix listed CWE-862
TI-2025-17766 CVE-2025-23999 · GHSA-qcgc-fxg9-3mgp

WordPress Breeze plugin <= 2.2.13 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.2.13.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00275 Published 2025-06-18 No fix listed CWE-862
TI-2024-33855 CVE-2024-50422 · GHSA-rx43-5j3v-c6c5

WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.1.14.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00558 Published 2024-10-29 No fix listed CWE-862
TI-2024-33864 CVE-2024-50431 · GHSA-x287-whfg-8hgx

WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze breeze allows Stored XSS.This issue affects Breeze: from n/a through <= 2.1.14.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00275 Published 2024-10-28 No fix listed CWE-79
TI-2024-18043 CVE-2024-27188 · GHSA-374x-f6v3-7m9h

WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze breeze.This issue affects Breeze: from n/a through <= 2.1.3.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00342 Published 2024-03-27 No fix listed CWE-79
TI-2022-11914 CVE-2022-29444 · GHSA-qm2w-68c6-wxv5

WordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability

Priority LOW 30

Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability in Cloudways Breeze plugin <= 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wp_ajax_* actions in th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00571 Published 2022-05-02 No fix listed CWE-264