CVE-2026-79713

Name of the Vulnerable Software and Affected Versions Breeze Cache WordPress plugin versions prior to 2.5.15

Description The plugin fails to include specific tracking-related query parameters in its page-cache key while continuing to cache pages requested with those parameters. This allows an unauthenticated attacker to force a page rendered within their own request context to be stored and served from the clean URL cache entry to all subsequent visitors.

Recommendations Update the Breeze Cache WordPress plugin to version 2.5.15 or later.