cloudways Breeze vulnerabilities

Latest cloudways Breeze CVEs

Newest publication first

1. CVE-2026-73356 WordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerability

   Published 2026-08-18

   High·CVSS 8.2 EPSS 0.37%

   Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions.

2. CVE-2025-69364 WordPress Breeze plugin <= 2.2.21 - Broken Access Control vulnerability

   Published 2026-01-06

   Medium·CVSS 5.3 EPSS 0.27%

   Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.2.21.

3. CVE-2025-23999 WordPress Breeze plugin <= 2.2.13 - Broken Access Control vulnerability

   Published 2025-06-18

   Medium·CVSS 4.3 EPSS 0.27%

   Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.2.13.

4. CVE-2024-50422 WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability

   Published 2024-10-29

   Medium·CVSS 5.3 EPSS 0.56%

   Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <= 2.1.14.

5. CVE-2024-50431 WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability

   Published 2024-10-28

   Medium·CVSS 5.9 EPSS 0.27%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze breeze allows Stored XSS.This issue affects Breeze: from n/a through <= 2.1.14.

6. CVE-2024-27188 WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

   Published 2024-03-27

   Medium·CVSS 5.9 EPSS 0.34%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze breeze.This issue affects Breeze: from n/a through <= 2.1.3.

7. CVE-2022-29444 WordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability

   Published 2022-05-02

   Medium·CVSS 5.4 EPSS 0.57%

   Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability in Cloudways Breeze plugin <= 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wp_ajax_* actions in the class Breeze_Configuration which includes the ability to c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.