Executive brief
The Breeze Cache WordPress plugin is used to improve website performance by caching pages and content. Attackers can exploit a path traversal vulnerability to create files at arbitrary locations on the server outside the intended cache directory, consuming disk space or overwriting existing files. This vulnerability requires no authentication and can compromise the integrity and availability of the affected WordPress site.
Technical details
The vulnerability is a path traversal flaw in the Breeze Cache plugin's cache file creation logic. The plugin fails to sanitize user-supplied input from HTTP requests before using it to construct file paths, allowing unauthenticated attackers to write files outside the intended cache directory. While the resulting file extension is constrained and content is not directly attacker-controlled, the impact includes arbitrary file creation and disk consumption. On systems with the optional asset optimization feature enabled, existing site files can be overwritten. On Windows hosts, planted files can be served publicly and existing files at the same location can be deleted. The vulnerability was fixed in version 2.5.13.
Affected products
- Astra Breeze Cache before 2.5.13
Timeline
- 2026-08-26: disclosed
- 2026-08-28: patched: Fixed in version 2.5.13