The Breeze Cache plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fetch_gravatar_from_remote' function i…

The Breeze Cache plugin for WordPress contains an arbitrary file upload vulnerability in versions up to 2.4.4 due to missing file type validation in the 'fetch_gravatar_from_remote' function. Unauthenticated attackers can exploit this to upload arbitrary files and potentially achieve remote code execution. The vulnerability requires the 'Host Files Locally - Gravatars' feature to be enabled, which is disabled by default. This affects the server security of WordPress sites using the vulnerable plugin versions.