The Breeze WordPress plugin improperly handles the wordpress_logged_in_ cookie in the inc/cache/execute-cache.php file when caching logged-in users. It extracts the username from the cookie without verifying the cryptographic signature or session validity against WordPress core. This flaw allows unauthenticated attackers to supply a crafted cookie (e.g., wordpress_logged_in_fake=admin|fake) to access cached HTML content generated for administrators, leading to exposure of sensitive information such as private posts, admin interface elements, and security tokens.

An unauthenticated attacker can gain access to cached content intended for authenticated users, including administrators. This results in the disclosure of sensitive information such as private posts (full content), the WordPress Admin Bar, nonces, and other data normally restricted to logged-in users. The vulnerability does not affect integrity or availability but compromises confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to disable the "Cache Logged-in Users" setting in the Breeze plugin to prevent exposure of sensitive cached content to unauthorized actors.