All-in-One WP Migration and Backup WordPress Plugin Fixes Flaw That Could Enable Site Takeover
The All-in-One WP Migration and Backup WordPress plugin has fixed vulnerability CVE-2026-19949. Operators should update to version 7.110 or later.
Tag SQL injection
CISA Adds Switchvox Vulnerability to KEV Catalog
CISA added CVE-2026-9586 in Sangoma Switchvox SMB to the Known Exploited Vulnerabilities catalog. The unauthenticated SQL injection could lead to remote code execution; a fix has been available since July.