Product

Boost Plugin for WordPress <= 2.0.3

1 brief RSS

CVE-2026-9010 - WordPress Boost Plugin Time-Based SQL Injection

The Boost plugin for WordPress is vulnerable to time-based SQL Injection (CVE-2026-9010) via the 'current_url' and 'user_name' parameters in versions up to 2.0.3, allowing unauthenticated attackers to extract sensitive information from the database due to insufficient input sanitization.

Boost plugin for WordPress <= 2.0.3 cve sqli wordpress

1r 1t 1c 16h ago