WordPress security by component
Boost
Plugin description
Boost is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published May 20, 2026; the highest CVE/CNA score is 9.8.
Plugin slug:
boostLatest vulnerability
CVE-2026-9010: Boost: SQL injection
Boost is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 2.0.3.
| Safe version |
|
||
|---|---|---|---|
| May 20, 2026 |
CVE-2026-9010
Boost: SQL injection
Boost is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 2.0.3.
|
> 2.0.3 |
CVE7.5
NVDPending
|
| May 20, 2026 |
CVE-2026-7637
Boost: Code execution
Boost is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is <= 2.0.3.
|
> 2.0.3 |
CVE9.8
NVDPending
|