Breeze plugin vulnerability