The Breeze Cache plugin for WordPress versions up to 2.5.2 contains a flaw where the plugin blindly parses the username portion of the wordpress_logged_in_ cookie without validating the cryptographic signature provided by WordPress. An unauthenticated attacker can forge a cookie such as wordpress_logged_in_fake=admin|fake, causing the plugin to locate and serve the cached HTML file that was generated for a privileged user. This results in the disclosure of information normally restricted to administrators, including private posts, the admin bar, nonces, and other protected data.

The affected product is the Breeze Cache plugin distributed by Cloudways, specifically every release up to and including version 2.5.2 used on WordPress installations. No other vendors are listed, and no version information beyond the <=2.5.2 bound is provided.

The CVSS score of 5.3 indicates moderate impact, while the EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog. Because the vulnerability does not require authentication, an attacker who can set the cookie on the target site can execute the exploit by transmitting a crafted cookie in an HTTP request, causing the plugin to serve cached content for an administrator. The lack of a signature check is the key weakness identified as CWE‑200.