The PixelYourSite Boost plugin is susceptible to an unauthenticated SQL injection flaw that enables attackers to perform unauthorized database operations.

The plugin contains an SQL injection flaw (CWE-89) due to improper neutralization of user-supplied input in database queries. This vulnerability is accessible to unauthenticated remote attackers.

An attacker can exploit this vulnerability to read sensitive data from the database or potentially modify existing records. Given the CVSS score of 9.3, this represents a major security risk that could result in the compromise of user data or sensitive configuration settings.

Immediate Action: Update the PixelYourSite Boost plugin to the latest available version.

Proactive Monitoring: Review database logs for suspicious query activity or unusual database errors that might indicate an injection attempt.

Compensating Controls: Implement a Web Application Firewall (WAF) to intercept and block malicious SQL injection strings targeting the application.

Public Exploit Available: No (exploit_available unknown)

Given the critical nature of this vulnerability, immediate remediation is required. Organizations should identify and update all instances of the affected plugin to ensure protection against potential SQL injection attacks.