CVE-2026-2128: Exposure of Sensitive Information to an Unauthorized Actor

The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to improper verification of the wordpressloggedin cookie in the inc/cache/execute-cache.php file when the "Cache Logged-in Users"...

MAL-2025-32991 Malicious code in serialize-module-wind-cache-execute (npm)

The package serialize-module-wind-cache-execute was found to contain malicious code...

Malicious code in serialize-module-wind-cache-execute (npm)

The package serialize-module-wind-cache-execute was found to contain malicious code...