WordPress backup plugin vulnerability CVE-2026-19949 in All-in-One WP Migration exposes 3.25 million unpatched sites to ...

Sangoma Switchvox faces an actively exploited critical flaw enabling unauthenticated remote command execution.

Second-order SQL injection flaw (CVE-2026-19949) in the All-in-One WP Migration and Backup plugin can be exploited for ...

Threat actors are actively attempting to exploit CVE-2026-9586, a critical unauthenticated SQL injection vulnerability in ...

A high-severity vulnerability in the All-in-One WP Migration and Backup plugin could allow unauthenticated attackers to take ...

A high-severity vulnerability in the All-in-One WP Migration and Backup WordPress plugin could allow unauthenticated ...

University of Regina assistant professor Abbas Yazdinejad wrote in a September 3, 2026, The Conversation article that memory ...

CISA adds seven exploited flaws affecting SonicWall, Artifactory, Switchvox, Starlette, Kestra, and LiteLLM to its KEV ...

Une faille critique touche All-in-One WP Migration and Backup, un plugin installé sur plus de cinq millions de sites ...

Security researcher X1NON disclosed a reported XML tag injection jailbreak in Claude Sonnet 4.6 on June 14, 2026, alleging ...

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution.

The vulnerability, a severe SQL injection flaw with a CVSS score of 9.3, affects Sangoma Switchvox SMB Edition 8.3 (104997).