PatchSiren

PixelYourSite Professional CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL PixelYourSite Professional CVE published 2026-08-24

CVE-2026-32555

A critical unauthenticated SQL injection vulnerability exists in the Boost plugin versions up to 2.0.4. This issue allows attackers to inject malicious SQL code, potentially leading to data breaches or system compromise. The vulnerability has a CVSS score of 9.3, indicating a high severity level. Defenders should assess exposure and prioritize remediation efforts.