Vulnerabilities in cloudways
10 resultsVexday analysis
Cloudways apresenta um perfil de risco baixo com apenas 3 CVEs registradas e nenhuma sob exploração ativa no momento. O portfólio é dominado por falhas de exposição de informações (CWE-200), com 1 vulnerabilidade crítica e 1 publicação recente (últimos 90 dias), sugerindo um risco gerenciável e sem pressão exploratória imediata.
CVE-2026-3844CRITICALBreeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remoteEPSS 27.7%CVE-2024-50422MEDIUMWordPress Breeze plugin <= 2.1.14 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2022-29444MEDIUMWordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerabilityEPSS 0.5%CVE-2025-13864MEDIUMBreeze – WordPress Cache Plugin <= 2.2.21 - Missing Authorization to Cache DeletionEPSS 0.4%CVE-2024-27188MEDIUMWordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-2128MEDIUMBreeze Cache <= 2.5.2 - Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login CookieEPSS 0.3%CVE-2024-50431MEDIUMWordPress Breeze plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-73356HIGHWordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerabilityEPSS 0.3%CVE-2025-69364MEDIUMWordPress Breeze plugin <= 2.2.21 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-23999MEDIUMWordPress Breeze plugin <= 2.2.13 - Broken Access Control vulnerabilityEPSS 0.2%