Description
The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from, the clean URL's cache entry to every subsequent visitor.
Published: 2026-09-18
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Cache Poisoning with possibility of user context leakage
Action: Update Plugin
AI Analysis

Impact

The Breeze Cache plugin for WordPress allows a crafted request that includes tracking parameters to be cached under a key that does not store those parameters, resulting in a CWE-444 weakness. An unauthenticated attacker can therefore place a page rendered under their own request context into the cache. On subsequent visits to the same clean URL, the attacker‑crafted content is served to all users, potentially exposing sensitive data or modifying page content.

Affected Systems

All Breeze Cache WordPress plugin installations with a version older than 2.5.15 are vulnerable. The issue applies to every site that relies on page caching without keying on tracking query parameters.

Risk and Exploitability

The vulnerability has a CVSS score of 6.5 and an EPSS score of less than 1%, and it is not listed in the CISA KEV catalog. Attackers can exploit it remotely through any accessible URL that includes tracking parameters, without the need for authentication. The risk is moderate but the impact on a site’s integrity and the user experience can be significant.

Generated by OpenCVE AI on September 19, 2026 at 19:44 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to Breeze Cache 2.5.15 or later to ensure tracking parameters are included in cache keys.
  • If an immediate upgrade is not possible, disable the page‑caching feature for public pages or expose a notice that caching is temporarily turned off.
  • Monitor site traffic for abnormal caching behavior and verify that cached pages no longer reflect visitor‑specific query parameters.

Generated by OpenCVE AI on September 19, 2026 at 19:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 28 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Wordpress-extensions
Wordpress-extensions breeze Cache
Vendors & Products Wordpress-extensions
Wordpress-extensions breeze Cache

Fri, 18 Sep 2026 11:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-444
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 18 Sep 2026 06:45:00 +0000

Type Values Removed Values Added
Description The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from, the clean URL's cache entry to every subsequent visitor.
Title Breeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}

Subscriptions

Wordpress-extensions Breeze Cache
cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published:

Updated: 2026-09-18T10:59:56.236Z

Reserved: 2026-08-25T13:26:01.835Z

Link: CVE-2026-79713

cve-icon Vulnrichment

Updated: 2026-09-18T10:53:14.166Z

cve-icon NVD

Status : Deferred

Published: 2026-09-18T07:16:50.260

Modified: 2026-09-18T19:08:32.830

Link: CVE-2026-79713

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-28T19:49:59Z

Weaknesses
  • CWE-444

    Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')