SecurityBleepingComputerabout 2 hours ago
WordPress plugin flaw exposes millions to takeover
1 min read
An SQL injection flaw in the All-in-One WP Migration and Backup plugin allows unauthenticated attackers to execute remote code. Tracked as CVE-2026-19949, the vulnerability affects versions through 7.109 and was fixed in 7.110. Over 3.25 million sites remain vulnerable.
Level
Hype check
Tap to vote and see what everyone thinks.
