CVE-2026-79706 — Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal
The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthentica…
Published: 2026-08-28 · CVSS: 5.3 · CVSS 3.1
The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7