The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory.
CVE-2026-79706
NONE
Updated Aug 28, 2026
WordPress
CVE Details
CVE ID
CVE-2026-79706
Published Date
Aug 28, 2026
Vendor
WordPress
Severity
NONE
Impact
Minimal impact
Source
View Advisory