{"id":235789,"date":"2026-04-23T22:12:37","date_gmt":"2026-04-24T03:12:37","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/04\/hackers-exploit-file-upload-bug-in-breeze-cache-wordpress-plugin"},"modified":"2026-04-23T22:12:37","modified_gmt":"2026-04-24T03:12:37","slug":"hackers-exploit-file-upload-bug-in-breeze-cache-wordpress-plugin","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/04\/hackers-exploit-file-upload-bug-in-breeze-cache-wordpress-plugin","title":{"rendered":"Hackers exploit file upload bug in Breeze Cache WordPress plugin"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/hackers-exploit-file-upload-bug-in-breeze-cache-wordpress-plugin.jpg\"><\/a><\/p>\n<p>Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary files on the server without authentication.<\/p>\n<p>The security issue is tracked as CVE-2026\u20133844 and has been leveraged in more than 170 exploitation attempts by the Wordfence security solution for the WordPress ecosystem.<\/p>\n<p>The Breeze Cache WordPress caching plugin from Cloudways has more than 400,000 active installations and is designed to improve performance and loading speed by reducing page load frequency through caching, file optimization, and database cleanup.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary files on the server without authentication. The security issue is tracked as CVE-2026\u20133844 and has been leveraged in more than 170 exploitation attempts by the Wordfence security solution for the WordPress ecosystem. The Breeze Cache WordPress caching [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1492],"tags":[],"class_list":["post-235789","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/235789","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=235789"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/235789\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=235789"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=235789"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=235789"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}