Critical Vulnerability in Breeze Cache Plugin Exposes WordPress Sites to Attacks
Hackers are taking advantage of a serious vulnerability in the Breeze Cache plugin for WordPress, affecting over 400,000 active installations. This flaw, tracked as CVE-2026-3844, allows attackers to upload unauthorized files to servers, potentially leading to complete website takeovers. Security researchers have noted that there have been more than 170 exploitation attempts targeting this issue since its discovery.
The vulnerability scores a critical 9.8 out of 10 on the severity scale. It affects all versions up to 2.4.4, but the risk is heightened only if the “Host Files Locally – Gravatars” feature is enabled, which is not the default setting.
Website owners are strongly advised to update to version 2.4.5, which addresses the flaw. If an update isn’t possible, disabling the Gravatars feature is recommended.
Risk Level: High
Source: View Original Report
