CVE-2026-3844

CVE-2026-3844 — WordPress Breeze Cache Subida de Archivos No Autenticada Resumen Este repositorio contiene un script de prueba de concepto PoC en Python para demostrar una vulnerabilidad de Subida Arbitraria de Archivos No Autenticada que afecta al plugin WordPress Breeze Cache ⚠️ Este proyecto...

CVE-2026-3844

Explotación Masiva de CVE-2026-3844 CVE-2026-3844 – Breeze Cache WordPress =2.4.4 permite la subida de archivos sin autenticación mediante fetchgravatarfromremote cuando el alojamiento local de gravatar está habilitado. Instalación Descargar el repositorio git clone...

CVE-2026-3844

CVE-2026-3844 — Breeze Cache RCE Subida de archivos arbitraria sin autenticación → Ejecución remota de código Campo| Valor ---|--- CVE| CVE-2026-3844 CVSS| 9.8 Crítico Plugin| Breeze Cache Cloudways Afectado| ≤ 2.4.4 Corregido| 2.4.5 Descubierto por| Hung Nguyen bashu PoC por| halilkirazkaya...

CVE-2026-3844

CVE-2026-3844 — Breeze Cache = 2.4.4 Subida Arbitraria de Archivos No Autenticada a RCE Resumen Campo| Valor ---|--- CVE| CVE-2026-3844 CVSS| 9.8 Crítico CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-434 — Subida Sin Restricciones de Archivos con Tipo Peligroso Plugin| Breeze Cache de...

CVE-2026-3844

CVE-2026-3844 Breeze Cache ≤ 2.4.4 - Subida Arbitraria de Archivos sin Autenticación ⚠️ Aviso Legal ESTA HERRAMIENTA SE PROPORCIONA SOLO CON FINES EDUCATIVOS Y DE INVESTIGACIÓN EN SEGURIDAD. El acceso no autorizado a sistemas informáticos es ilegal. Utilice esta herramienta únicamente en sistemas...

CVE-2026-3844-Lab

CVE-2026-3844 — Breeze Cache Unauthenticated Arbitrary File Upload to RCE Lab Local-only Docker lab for reproducing and comparing CVE-2026-3844 behavior in the WordPress Breeze Cache plugin. This repository demonstrates the vulnerable behavior in Breeze Cache 2.4.4 and compares it with the patche...

CVE-2026-3844

CVE-2026-3844 Exploit PoC para CVE-2026-3844, una vulnerabilidad crítica de subida arbitraria de archivos sin autenticación en el plugin Breeze de WordPress que conduce a RCE. 📌 Descripción general CVE-2026-3844 es una vulnerabilidad CRÍTICA de subida arbitraria d...

CVE-2026-3844-Breeze-Cache-WordPress-Plugin-Remote-Code-Execution

CVE-2026-3844 – Breeze Cache WordPress Plugin Unauthenticated RCE -red?style=flat-square CVE-2026-3844 is a critical unauthenticated arbitrary file upload vulnerability in the Breeze Cache WordPress plugin versions ≤ 2.4.4. An attacker can post a comment containing a malicious tag pointing to a P...

CVE-2026-3844

╔════════════════════════════════════════════════════════════╗ ║ CVE-2026-3844 ║ ║ Breeze Cache = 2.4.4 Arbitrary File Upload ║ ║ Unauthenticated RCE | Authorized Lab Use Only ║ ╚════════════════════════════════════════════════════════════╝ Descripción general CVE-2026-3844 es una vulnerabilidad ...

CVE-2026-79713

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

CVE-2026-79713 Breeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

EUVD-2026-82684

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

CVE-2026-79713 Breeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

CVE-2026-79713

Breeze Cache (WordPress plugin, versions 1.2.5 through 2.5.14 ) is vulnerable to unauthenticated cache poisoning caused by a missing set of tracking-related query parameters in its page-cache key . Because pages requested with those parameters are still cached and served from the clean URL's cach...

PT-2026-95258

Name of the Vulnerable Software and Affected Versions Breeze Cache WordPress plugin versions prior to 2.5.15 Description The plugin fails to include specific tracking-related query parameters in its page-cache key while continuing to cache pages requested with those parameters. This allows an...

CVE-2026-79713: Inconsistent Interpretation of HTTP Requests

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

CVE-2026-79706

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

CVE-2026-79706 Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

CVE-2026-79706

The Breeze Cache WordPress plugin, in versions before 2.5.13 , is vulnerable to an unauthenticated file creation flaw. The root cause is a failure to sanitize request values used to construct file paths for cached content. This allows an unauthenticated attacker to create files at arbitrary locat...

EUVD-2026-67573

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...