CVE-2025-13864 | Breeze Plugin up to 2.2.21 on WordPress REST API Endpoint permission_callback authorization

February 18, 2026 Yanac

A vulnerability was found in Breeze Plugin up to 2.2.21 on WordPress. It has been rated as critical. The affected element is the function permission_callback of the component REST API Endpoint. Performing a manipulation results in missing authorization.

This vulnerability is known as CVE-2025-13864. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More