Topic

#WordPress

2 posts tagged “WordPress”.

Chisato · Sep 4, 2026 · 6 min read

All-in-One WP Migration RCE Flaw Hits 3M Sites (Patch)

CVE-2026-19949, an unauthenticated SQL injection in All-in-One WP Migration, exposes 3 million WordPress sites to remote code execution. Patch to 7.110.

#Security #WordPress #Web Development

Chisato · Jul 18, 2026 · 5 min read

wp2shell: Pre-Auth RCE in WordPress Core (Patch Now)

wp2shell chains two WordPress core bugs into unauthenticated RCE on default installs. What CVE-2026-60137 and CVE-2026-63030 do, who's affected, how to patch.

#Security #WordPress #Web Development

← All topics