CVE-2024-27188

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze.This issue affects Breeze: from n/a through = 2.1.3...

CVE-2024-50431

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze allows Stored XSS.This issue affects Breeze: from n/a through = 2.1.14...

CVE-2024-50422

Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through = 2.1.14...

CVE-2025-3749

The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘calsize’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

CVE-2025-3749

The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘calsize’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

CVE-2025-3749

CVE-2025-3749 — Breeze Display (WordPress) Stored XSS : WordPress Breeze Display plugin versions up to 1.2.3 allow stored cross-site scripting via the cal_size parameter due to insufficient input sanitization and output escaping. Exploitation requires authentication at Contributor level or higher...

CVE-2025-3749 Breeze Display <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via cal_size Parameter

The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘calsize’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

CVE-2025-3749 Breeze Display <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via cal_size Parameter

The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘calsize’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

WordPress Breeze Display plugin <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via cal_size Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via calsize Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Breeze Display versions = 1.2.3...

WordPress plugin Breeze Display 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-17859 · WordPress · Breeze Display

Name of the Vulnerable Software and Affected Versions: Breeze Display plugin for WordPress versions up to, and including, 1.2.3 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

CVE-2024-50422

Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through = 2.1.14...

CVE-2024-50422

CVE-2024-50422 affects Breeze (WordPress Breeze plugin) up to version 2.1.14. Root cause is broken/Missing Authorization due to incorrectly configured access control security levels. The issue enables unauthorized access to Breeze functionality. Patch guidance is to upgrade to Breeze 2.1.15 or la...

CVE-2024-50422 WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through = 2.1.14...

CVE-2024-50422 WordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through = 2.1.14...

PT-2024-34196 · Cloudways · Cloudways Breeze

Name of the Vulnerable Software and Affected Versions: Cloudways Breeze versions 2.1.14 and earlier Description: The issue is related to a Missing Authorization vulnerability in Cloudways Breeze, which allows exploitation due to incorrectly configured access control security levels...

WordPress plugin Breeze 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-50431

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze allows Stored XSS.This issue affects Breeze: from n/a through = 2.1.14...

CVE-2024-50431

CVE-2024-50431 is a stored XSS vulnerability in the Breeze WordPress plugin (Cloudways Breeze). It affects Breeze versions up to 2.1.14. The underlying issue is improper input neutralization during web page generation. Patch information from Patchstack indicates the fix is in Breeze 2.1.15. The C...

CVE-2024-50431 WordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cloudways Breeze breeze allows Stored XSS.This issue affects Breeze: from n/a through = 2.1.14...