Product

Boost Plugin for WordPress

1 brief RSS

CVE-2026-7637 - Boost Plugin for WordPress PHP Object Injection

The Boost plugin for WordPress is vulnerable to PHP Object Injection (CVE-2026-7637) due to deserialization of untrusted input in the STYXKEY-BOOST_USER_LOCATION cookie, potentially leading to arbitrary code execution if a suitable property-oriented programming (POP) chain is present.

Boost plugin for WordPress php-object-injection wordpress vulnerability

2r 1t 1c 16h ago