Cloudways - vulnerabilities (CVEs)

10 CVEs in 3 products, 0 in the last 30 days, newest from 2026-08-18.

Products

Breeze - 6 CVEs
Breeze Cache - 3 CVEs
Breeze Wordpress Plugin - 1 CVEs

Newest CVEs of Cloudways

CVE-2026-73356 - CVSS 8.2 (high), 2026-08-18: Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions.
CVE-2026-2128 - CVSS 5.3 (medium), 2026-05-29: The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This…
CVE-2026-3844 - CVSS 9.8 (critical), 2026-04-23: The Breeze Cache plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fetch_gravatar_from_remote' function…
CVE-2025-13864 - CVSS 5.3 (medium), 2026-02-19: The Breeze - WordPress Cache Plugin plugin for WordPress is vulnerable to unauthorized cache clearing in all versions up to, and including, 2.2.21. This is…
CVE-2025-69364 - CVSS 5.3 (medium), 2026-01-06: Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2025-23999 - CVSS 4.3 (medium), 2025-06-18: Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2024-50422 - CVSS 5.3 (medium), 2024-10-29: Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2024-50431 - CVSS 5.9 (medium), 2024-10-28: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze breeze allows Stored XSS.This issue…
CVE-2024-27188 - CVSS 5.9 (medium), 2024-03-27: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze breeze.This issue affects Breeze: from…
CVE-2022-29444 - CVSS 6.5 (medium), 2022-05-02: Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability in Cloudways Breeze plugin <= 2.0.2 on WordPress allows users with a subscriber or…