Vulnerabilities

3M WordPress Sites Hit by SQLi Flaw

September 03, 2026 1 min read 4 views
cybersecurity news
A critical SQL injection vulnerability (CVE-2026-19949) in a WordPress migration plugin affects over 3 million sites, potentially allowing unauthenticated remote code execution.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.