CVE-2026-79713

6.5 Moyenne

Publiée le 18/09/2026 à 09:16 · Modifiée le 18/09/2026 à 21:08 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from, the clean URL's cache entry to every subsequent visitor.

Traduire en français

Produits concernés

Unknown Breeze Cache

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	contact@wpscan.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-444

Références

https://wpscan.com/vulnerability/7d62297b-40e3-445f-b970-9a34dcabd7c7/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories