Filtered by category: Security Week, tag: sql injection × Clear
Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability
Matched: WordPress
A high-severity SQL injection vulnerability, CVE-2026-19949, has been discovered in a WordPress migration plugin used by over 3 million sites. The flaw could allow unauthenticated attackers to execute remote code. Site administrators are urged to update the affected plugin promptly to mitigate potential exploitation.