Skip to content
OpenAdvisories

Product · PixelYourSite

Boost

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-9010

    Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters

    The Boost plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_url' and 'user_name' parameters in versions up to, and including, 2.0.3 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation o…

    PixelYourSite Boost boost Web / CMS Azure Linux