PT-2026-95258 · WordPress · Breeze Cache
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Breeze Cache WordPress plugin versions prior to 2.5.15
Description
The plugin fails to include specific tracking-related query parameters in its page-cache key while continuing to cache pages requested with those parameters. This allows an unauthenticated attacker to force a page rendered within their own request context to be stored and served from the clean URL cache entry to all subsequent visitors.
Recommendations
Update the Breeze Cache WordPress plugin to version 2.5.15 or later.
Exploit
Fix
HTTP Request/Response Smuggling
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Breeze Cache