CVE-2026-3844

root@kitploit: ╔════════════════════════════════════════════════════════════╗ ║ CVE-2026-3844 ║ ║ Breeze Cache = 2.4.4 Arbitrary File Upload ║ ║ Unauthenticated RCE | Authorized Lab Use Only ║ ╚════════════════════════════════════════════════════════════╝ 概述 CVE-2026-3844 是一个任意文件上传漏洞，影响存在漏洞版本的...

CVE-2026-3844

CVE-2026-3844 — WordPress Breeze Cache Subida de Archivos No Autenticada Resumen Este repositorio contiene un script de prueba de concepto PoC en Python para demostrar una vulnerabilidad de Subida Arbitraria de Archivos No Autenticada que afecta al plugin WordPress Breeze Cache ⚠️ Este proyecto...

CVE-2026-3844

CVE-2026-3844 — Breeze Cache 远程代码执行 未认证任意文件上传 → 远程代码执行 字段| 值 ---|--- CVE| CVE-2026-3844 CVSS| 9.8（严重） 插件| Breeze Cache Cloudways 受影响版本| ≤ 2.4.4 修复版本| 2.4.5 发现者| Hung Nguyen bashu PoC 作者| halilkirazkaya 概述 Breeze Cache WordPress 插件（≤...

CVE-2026-3844

CVE-2026-3844 — Breeze Cache | | | 评论已保存 |...

CVE-2026-3844

CVE-2026-3844 Breeze Cache ≤ 2.4.4 - 未认证的任意文件上传 ⚠️ 免责声明 root@kitploit: 本工具仅供教育和安全研究目的使用。 未经授权访问计算机系统是违法的。请仅在您拥有或获得明确测试许可的系统上使用本工具。 作者对本软件的任何滥用或造成的损害不承担任何责任。 📋 描述 CVE-2026-3844 是 WordPress 的 Breeze Cache 插件（版本 ≤ 2.4.4）中的一个严重未认证任意文件上传漏洞。该插件未能正确验证评论中的 srcset 参数，允许远程攻击者向服务器上传恶意文件（包括 WebShell）。 🔴 严重性...

CVE-2026-3844

Explotación Masiva de CVE-2026-3844 CVE-2026-3844 – Breeze Cache WordPress =2.4.4 permite la subida de archivos sin autenticación mediante fetchgravatarfromremote cuando el alojamiento local de gravatar está habilitado. Instalación Descargar el repositorio root@kitploit: git clone...

CVE-2026-3844-Lab

CVE-2026-3844 — Breeze Cache 認証なし任意ファイルアップロードによるRCEラボ WordPressのBreeze CacheプラグインにおけるCVE-2026-3844の動作を再現・比較するためのローカル限定Dockerラボです。 このリポジトリは、Breeze Cache 2.4.4 の脆弱な動作を示し、Breeze Cache 2.4.5 のパッチ適用後の動作と比較します。ラボは2つの隔離されたWordPressサービス（脆弱なものとパッチ適用済みのもの）と、Dockerネットワーク内のローカルペイロードサーバーを使用します。 概念実証は意図的に最小限の害...

CVE-2026-3844

CVE-2026-3844 Exploit PoC para CVE-2026-3844, una vulnerabilidad crítica de subida arbitraria de archivos sin autenticación en el plugin Breeze de WordPress que conduce a RCE...

CVE-2026-3844-Breeze-Cache-WordPress-Plugin-Remote-Code-Execution

CVE-2026-3844 – Breeze Cache WordPressプラグイン認証なしRCE -red?style=flat-square CVE-2026-3844 は、Breeze Cache WordPressプラグイン（バージョン ≤ 2.4.4）における、認証なしの重大な任意ファイルアップロード脆弱性です。攻撃者は、PHPウェブシェルを指す悪意のある...

CVE-2026-79706

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

CVE-2026-79706 Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

CVE-2026-79706

CVE-2026-79706 affects the Breeze Cache WordPress plugin in versions prior to 2.5.13 . The root cause is an unsanitised request value used to construct cache file paths, enabling unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory. ...

EUVD-2026-67573

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

The vulnerability of the fetch_gravatar_from_remote() function in the Breeze Cache plugin of the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the fetchgravatarfromremote function in the Breeze Cache plugin of the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Exploit for CVE-2026-3844

text ╔═══════════════════════════════════════════════════════...

EUVD-2026-43283

The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the fina...

CVE-2026-10551

The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the fina...

CVE-2026-10551

The Breeze Cache WordPress plugin (before version 2.5.6) is vulnerable to unauthenticated Stored XSS due to a predictable replacement hash in the HTML minification process and a related regex misusage. An attacker can inject arbitrary HTML attributes into the final HTML by predicting the placehol...

CVE-2026-10551 Breeze Cache < 2.5.6 - Unauthenticated Stored XSS via Minify Library

The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the fina...

CVE-2026-10551

The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the fina...