CVE-2026-73356CWE-862broken-access-control

CVE-2026-73356

High · published August 18, 2026

CVSS v3.1

8.2

EPSS

0%

Percentile

29.8

In the wild

Unconfirmed

What it is

Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions.

The record

Technical detail

CVSS v3.1: 8.2 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0: Not supplied
EPSS: 0.00371 · 29.8th percentile
Weakness: CWE-862 · Missing Authorization
Published: 2026-08-18T19:17Z

References (1)

https://patchstack.com/database/wordpress/plugin/breeze/vulnerability/wordpress-breeze-plugin-2-5-12-arbitrary-content-deletion-vulnerability?_s_id=cve · [email protected]

EPSS history

Timeline

18 AUG 14:00Z
WordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerability
cvelistv5