CVE-2026-10551

Name of the Vulnerable Software and Affected Versions Breeze Cache WordPress plugin versions prior to 2.5.6

Description An unauthenticated Stored Cross-Site Scripting (XSS) issue exists due to a predictable replacement hash used during the HTML minification process and the abuse of a regular expression. This allows an attacker to inject arbitrary HTML attributes into the final HTML output by anticipating the placeholder format.

Recommendations Update Breeze Cache WordPress plugin to version 2.5.6 or later.