CVE-2026-79706 — Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

CVE-2026-79706

Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal PUBLISHED

Description (CNA)

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory.

Affected (CNA)

Vendor / product	Versions
Unknown / Breeze Cache	affected 0 before 2.5.13

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/c7086680-71ee-4520-9c21-d510b2ec92b4/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.