PixelYourSite Professional vulnerabilities
Published CVEs affecting PixelYourSite Professional products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-32556
High · 7.1
CWE-79 Aug 24, 2026
WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions.
CVE-2026-32555
Critical · 9.3
CWE-89 Aug 24, 2026
WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability
Unauthenticated SQL Injection in Boost <= 2.0.4 versions.