Cloudways’ Breeze Zero-Day Hits 400,000 Sites

A critical security threat is impacting the WordPress ecosystem as a zero-day vulnerability exploits the Breeze plugin from Cloudways, affecting over 400,000 websites. This pervasive risk stems from vulnerabilities such as CVE-2026-3844 and others, putting numerous sites in peril. Exploited in the wild, the cloudways breeze zero day poses a significant security challenge for site administrators utilizing this popular caching tool. The discovered vulnerabilities, including CVE-2026-33626 and CVE-2026-0740, highlight ongoing security concerns in widely used plugins. Experts urge immediate attention to this issue to mitigate potential damage. Website owners need to stay alert and ensure their security measures are up-to-date to protect against these threats. Understanding the risks and implementing patches as they become available is crucial. For a comprehensive examination and updates on mitigating this pressing threat, visit the official report on Security Online.

Over 400,000 WordPress Sites at Risk as “Breeze” Plugin Zero-Day Is Exploited in the Wild