{"vulnerability": "cve-2026-1994", "sightings": [{"uuid": "852ea495-3433-4982-81db-3bdcdeb2b226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1994", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf7yscbiz22h", "content": "", "creation_timestamp": "2026-02-19T16:20:58.276246Z"}, {"uuid": "666923a7-be38-44cc-a946-f4a271ada6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1994", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mffjijm6eq2m", "content": "", "creation_timestamp": "2026-02-21T21:03:03.447546Z"}, {"uuid": "30ed7b39-dad5-416d-a871-f77a57146afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1994", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116096121651199027", "content": "", "creation_timestamp": "2026-02-19T07:30:32.284026Z"}, {"uuid": "4404c643-8d6d-44c2-b66a-c5ca6c574d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1994", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf735tuyvq2n", "content": "", "creation_timestamp": "2026-02-19T07:30:34.587277Z"}, {"uuid": "51cc7922-629c-42ac-ad92-2a1ce93a38ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19942", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtg2jgznjh24", "content": "\ud83d\udfe0 CVE-2026-19942 - High (8.1)\n\nThe Atarim \u2013 AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedba...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19942/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T06:00:30.380704Z"}, {"uuid": "07a223cf-6d7d-4e42-bade-74565b18537c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19942", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtg5rrb3mr2b", "content": "Atarim WordPress\u30d7\u30e9\u30b0\u30a4\u30f3(v5.1.1\u4ee5\u524d)\u306e\u30d5\u30a1\u30a4\u30eb\u30d1\u30b9\u691c\u8a3c\u4e0d\u5099\u306b\u3088\u308a\u3001\u4f5c\u8005\u6a29\u9650\u3092\u6301\u3064\u653b\u6483\u8005\u306f\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3057\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19942 CVSS 8.1 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19942", "creation_timestamp": "2026-08-19T06:58:50.183057Z"}, {"uuid": "cca09ef7-a564-42c1-b361-58e0d2567664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19943", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-19943", "content": "", "creation_timestamp": "2026-08-25T08:15:08.533228Z"}, {"uuid": "7ccc0759-8926-45cc-bae7-225ce6c05c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ieoz7errhefg6", "content": "CVE-2026-19949 - All-in-One WP Migration and Backup\nCVE ID : CVE-2026-19949\n \n Published : Aug. 25, 2026, 12:16 p.m. | 18\u00a0minutes ago\n \n Description : The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality i...", "creation_timestamp": "2026-08-25T12:49:47.843052Z"}, {"uuid": "33f74f4c-8dbd-4d7f-84c1-e193c2556c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3muhx23vr4q2b", "content": "5 millones de sitios WP afectados por SQL injection\n\nAll-in-One WP Migration vulnerabilidad CVE-2026-19949 expone 5 millones de sitios WordPress. Verific\u00e1 si tu versi\u00f3n est\u00e1 afectada y actualiz\u00e1 en 2 minutos.\n\n#sqlinjection #allinonewpmigration #cve202619949 #wordpressplugins #seguridadwordpress", "creation_timestamp": "2026-09-01T17:28:44.740595Z"}, {"uuid": "2adf0417-c532-4bab-89bf-7ef9d05f7e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117203778448243818", "content": "#WordPress Plugin All-in-One WP Migration and Backup mit #Sicherheitsl\u00fccke CVE-2026-19949\nhttps://borncity.com/blog/2026/09/03/wordpress-plugin-all-in-one-wp-migration-and-backup-mit-sicherheitsluecke-cve-2026-19949/", "creation_timestamp": "2026-09-02T22:22:13.215298Z"}, {"uuid": "39ad2ad0-832a-4b34-b49c-a3d24de1f13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mukxwf7ul22t", "content": "#WordPress Plugin All-in-One WP Migration and Backup mit #Sicherheitsl\u00fccke CVE-2026-19949\n\nborncity.com/blog/2026/09...", "creation_timestamp": "2026-09-02T22:22:31.020655Z"}, {"uuid": "3d114181-1c94-4d08-ac0f-de20bcbdc0f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3muljyqi2m52k", "content": "\ud83d\udcf0 Celah Plugin Backup WordPress Ekspos Jutaan Situs pada Serangan Pengambilalihan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/03/celah-plugin-backup-wordpress-cve-2026-19949/\n\n#cybersecurity #keamananSiber #malware #teknologi #vulnerability #wordpress", "creation_timestamp": "2026-09-03T03:45:59.210857Z"}, {"uuid": "d508c35c-4ebb-45b9-8050-47ea4d6445fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mum5bwbv6p24", "content": "Kwetsbaarheid in populaire WordPress-plugin dreigt meer dan 5 miljoen sites te c\n\nEen ernstige kwetsbaarheid, geregistreerd als CVE-2026-19949, is ontdekt in de populaire WordPress-plugin All-in-One WP Migration and Backup, die wereldwijd door meer dan 5 miljoen websites wordt gebruikt. Deze...", "creation_timestamp": "2026-09-03T09:31:09.201209Z"}, {"uuid": "8324d38e-8155-44f9-8bca-5fc7e4a08dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mumc2zf52u2i", "content": "CVE-2026-19949 enables unauthenticated attackers to obtain a restore secret key and trigger remote code execution via crafted archive imports.\n", "creation_timestamp": "2026-09-03T10:56:45.906938Z"}, {"uuid": "25867178-82ac-4349-8b81-2f03806a76f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mumcknb47i2e", "content": "\u79fb\u884c\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3001300\u4e07\u4ee5\u4e0a\u306eWordPress\u30b5\u30a4\u30c8\u306b\u5f71\u97ff\n\nWordPress\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dDefiant\u304c\u3001WordPress\u7528\u30d7\u30e9\u30b0\u30a4\u30f3\u300cAll-in-One WP Migration and Backup\u300d\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u306b\u3088\u308a\u3001300\u4e07\u3092\u8d85\u3048\u308b\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u304c\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(RCE)\u653b\u6483\u306b\u3055\u3089\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-19949...", "creation_timestamp": "2026-09-03T11:05:29.909661Z"}, {"uuid": "09f32b80-e177-460e-823e-221ae3ce39a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mumcu5p4622x", "content": "WordPress\u79fb\u884c\u30d7\u30e9\u30b0\u30a4\u30f3\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027(CVE-2026-19949)\u304c\u3042\u308a\u3001300\u4e07\u4ee5\u4e0a\u306e\u30b5\u30a4\u30c8\u304c\u5f71\u97ff\u3092\u53d7\u3051\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3055\u308c\u308b\u6050\u308c\u304c\u3042\u308b\u3002", "creation_timestamp": "2026-09-03T11:10:49.073135Z"}, {"uuid": "9db61da4-c06d-4207-bf26-f2d143ae5d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mumdfyi3kj2o", "content": "\ud83e\udd16 CVE-2026-19949: 2nd-order SQLi in the All-in-One WP Migration and Backup plugin. Unauth attackers poison trackbacks; SQLi fires during admin restore, leaks the import key -> malicious .wpress -> RCE, full site takeover. ~3.25M sites still\u2026", "creation_timestamp": "2026-09-03T11:20:47.571165Z"}, {"uuid": "046f90ed-f32c-4ec6-92f7-aadff7dfd068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "Telegram/9raSwVD0Zu_yT3HMRfgQapiEJGVRuaKs1TEFe_xlxYqE4sA", "content": "", "creation_timestamp": "2026-09-03T12:00:04.870031Z"}, {"uuid": "0ceaa62f-a26f-464a-add9-0112f19b0e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mumerurqwv25", "content": "CVE-2026-19949 in All-in-One WP Migration and Backup may affect 3.2M WordPress sites. A second-order SQL injection in archive restore could enable RCE via trackbacks; only 35% are patched to 7.110. #WordPress #CVE202619949 #SQLInjection", "creation_timestamp": "2026-09-03T11:45:20.005860Z"}, {"uuid": "776a11b3-4ee2-4e89-b120-852ce46a5cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/true_secator/8573", "content": "\u0411\u043e\u043b\u0435\u0435 3 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b SQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 All-in-One WP Migration and Backup.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2026-19949, CVSS 8,8)) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043e \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 Defian. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0432\u0430 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Defiant, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u044b, \u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u043d\u0442 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u0441\u044b\u043b\u043e\u043a \u044f\u0434\u0440\u0430 WordPress, \u0434\u0430\u0431\u044b \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0432\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0438 RCE.\n\n\u041a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f WordPress \u0443\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0441\u0430\u0439\u0442\u044b \u0432 \u0430\u0440\u0445\u0438\u0432\u044b .wpress \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0430\u0440\u0445\u0438\u0432 \u043d\u0430 \u043b\u044e\u0431\u043e\u043c \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\nCVE-2026-19949 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0434\u0432\u0430 \u0442\u0440\u0435\u043a\u0431\u044d\u043a\u0430 \u043a \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044e, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u0443\u044e \u043a\u043e\u0441\u0443\u044e \u0447\u0435\u0440\u0442\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438 URL-\u0430\u0434\u0440\u0435\u0441, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0435. \u0412\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u0441\u044b\u0445 \u0447\u0435\u0440\u0442 \u0438 \u0431\u0435\u0437 \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u0443\u0435\u0442, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0430\u0439\u0442, \u043f\u043b\u0430\u0433\u0438\u043d \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u044b \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u043c SQL-\u043a\u043e\u0434\u0435. \u041f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 SQL-\u043a\u043e\u0434, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0438\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 REST API \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432 \u0441\u0430\u0439\u0442\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0430\u0440\u0445\u0438\u0432\u0430 .wpress, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043b\u0430\u0433\u0438\u043d, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443, \u043a\u0430\u043a \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u043e \u0432\u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 All-in-One WP Migration and Backup \u0434\u043e 7.109 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 7.110, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 20 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e All-in-One WP Migration and Backup - \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 5 \u043c\u043b\u043d. \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 3 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0442\u043e\u043b\u044c\u043a\u043e 35% \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.110, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 3,2 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0435\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 WordPress.", "creation_timestamp": "2026-09-03T14:00:04.467939Z"}, {"uuid": "f54a7153-7ca8-4e42-b0ef-8a0c0d6bc051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/information_security_channel/55843", "content": "Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability\nhttps://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/\n\nThe high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.\nThe post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability (https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-03T17:00:05.990675Z"}, {"uuid": "b546aa43-88da-4068-bce3-0509d9d81ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mun4wr2ywi2a", "content": "Critical WordPress vulnerability exposes 3.2 million sites to remote code execution via All-in-One WP\u00a0Migration\n\nCVE-2026-19949 is a second-order SQL injection in All-in-One WP Migration and Backup that leads to unauthenticated RCE.\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-19949-wp-migration-rce/", "creation_timestamp": "2026-09-03T18:57:34.271586Z"}, {"uuid": "d8a3a0a1-f470-4059-bbe3-c83129de017b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/pphm_HackerNews/2986", "content": "\ud83d\udd34 Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability\n\nA high-severity vulnerability in the All-in-One WP Migration and Backup WordPress plugin exposes over 3 million websites to remote code execution (RCE) attacks, WordPress security firm Defiant warns.\n\nTracked as CVE-2026-19949 (CVSS score of 8.8), the security defect is described as a second-order SQL injection issue in the archive restore functionality of the plugin.\n\nThe flaw exists because user-supplied input is insufficiently escaped and existing SQL queries are not sufficiently prepared, Defiant explains.", "creation_timestamp": "2026-09-03T21:00:29.024632Z"}, {"uuid": "b98453a6-c95f-46b9-8944-9b8f81b624ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/YUSQnHRGPoy1hnFlMACvlx_l4ArB_dfPL6N2OZrh3RVUvk4", "content": "", "creation_timestamp": "2026-09-03T22:00:09.637401Z"}, {"uuid": "0a04c11a-bc6d-4a22-9798-ca62f8d68321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/YUSQnHRGPoy1hnFlMACvlx_l4ArB_dfPL6N2OZrh3RVUvk4", "content": "", "creation_timestamp": "2026-09-04T00:00:11.491492Z"}, {"uuid": "25fb16f8-b75d-4058-9c0c-a39097dd9ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/pphm_HackerNews/2986", "content": "\ud83d\udd34 Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability\n\nA high-severity vulnerability in the All-in-One WP Migration and Backup WordPress plugin exposes over 3 million websites to remote code execution (RCE) attacks, WordPress security firm Defiant warns.\n\nTracked as CVE-2026-19949 (CVSS score of 8.8), the security defect is described as a second-order SQL injection issue in the archive restore functionality of the plugin.\n\nThe flaw exists because user-supplied input is insufficiently escaped and existing SQL queries are not sufficiently prepared, Defiant explains.", "creation_timestamp": "2026-09-04T00:00:18.942622Z"}, {"uuid": "9b1963d4-e2e1-4076-a166-fec30e1df46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/9raSwVD0Zu_yT3HMRfgQapiEJGVRuaKs1TEFe_xlxYqE4sA", "content": "", "creation_timestamp": "2026-09-04T00:00:49.434216Z"}, {"uuid": "9502ee19-1f8a-476b-84ff-e707d85f4917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/information_security_channel/55843", "content": "Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability\nhttps://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/\n\nThe high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.\nThe post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability (https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-04T00:00:42.716508Z"}, {"uuid": "bf9d48e6-6e3b-4c45-9625-d899906eb9ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/true_secator/8573", "content": "\u0411\u043e\u043b\u0435\u0435 3 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b SQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 All-in-One WP Migration and Backup.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2026-19949, CVSS 8,8)) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043e \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 Defian. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0432\u0430 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Defiant, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u044b, \u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u043d\u0442 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u0441\u044b\u043b\u043e\u043a \u044f\u0434\u0440\u0430 WordPress, \u0434\u0430\u0431\u044b \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0432\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0438 RCE.\n\n\u041a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f WordPress \u0443\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0441\u0430\u0439\u0442\u044b \u0432 \u0430\u0440\u0445\u0438\u0432\u044b .wpress \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0430\u0440\u0445\u0438\u0432 \u043d\u0430 \u043b\u044e\u0431\u043e\u043c \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\nCVE-2026-19949 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0434\u0432\u0430 \u0442\u0440\u0435\u043a\u0431\u044d\u043a\u0430 \u043a \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044e, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u0443\u044e \u043a\u043e\u0441\u0443\u044e \u0447\u0435\u0440\u0442\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438 URL-\u0430\u0434\u0440\u0435\u0441, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0435. \u0412\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u0441\u044b\u0445 \u0447\u0435\u0440\u0442 \u0438 \u0431\u0435\u0437 \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u0443\u0435\u0442, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0430\u0439\u0442, \u043f\u043b\u0430\u0433\u0438\u043d \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u044b \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u043c SQL-\u043a\u043e\u0434\u0435. \u041f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 SQL-\u043a\u043e\u0434, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0438\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 REST API \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432 \u0441\u0430\u0439\u0442\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0430\u0440\u0445\u0438\u0432\u0430 .wpress, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043b\u0430\u0433\u0438\u043d, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443, \u043a\u0430\u043a \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u043e \u0432\u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 All-in-One WP Migration and Backup \u0434\u043e 7.109 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 7.110, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 20 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e All-in-One WP Migration and Backup - \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 5 \u043c\u043b\u043d. \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 3 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0442\u043e\u043b\u044c\u043a\u043e 35% \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.110, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 3,2 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0435\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 WordPress.", "creation_timestamp": "2026-09-04T00:00:46.644195Z"}, {"uuid": "3729a239-99a5-41be-8846-33f7eb3d7fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/117211553239103462", "content": "Si vous avez utilis\u00e9 (et oubli\u00e9 \ud83d\ude05) All-in-One WP Migration and Backup sur votre #WordPress  c'est peut-\u00eatre le moment d'aller jeter un \u0153il.\nUne vuln\u00e9rabilit\u00e9 assez vilaine, CVE-2026-19949, touche les versions jusqu'\u00e0 7.109.\nUn attaquant peut d\u00e9poser du contenu pi\u00e9g\u00e9 qui reste en attente et devient dangereux lors d'un export/import du site. \u00c0 la cl\u00e9, il peut finir par ex\u00e9cuter du code sur le serveur et prendre le contr\u00f4le du WordPress.\nLe plugin est install\u00e9 sur plus de 5 millions de sites et environ 3,2 millions seraient encore sur une version vuln\u00e9rable.\n\ud83d\udc49 Si vous l'avez utilis\u00e9 un jour pour migrer un site et qu'il tra\u00eene toujours dans vos plugins : v\u00e9rifiez la version et passez au minimum en 7.110.\n\u2b07\ufe0f \"5 Million WordPress Sites Affected by SQL Injection Vulnerability in All-in-One WP Migration and Backup WordPress Plugin\"\ud83d\udc47 https://www.wordfence.com/blog/2026/09/5-million-wordpress-sites-affected-by-sql-injection-vulnerability-in-all-in-one-wp-migration-and-backup-wordpress-plugin\n#CyberVeille", "creation_timestamp": "2026-09-04T07:19:27.079367Z"}, {"uuid": "40725c4d-4cb1-4c7b-8b31-b815b18dbf53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/", "content": "The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.\n\nThe post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability appeared first on SecurityWeek.", "creation_timestamp": "2026-09-04T13:00:42.472449Z"}, {"uuid": "cac0f9b1-4739-4a46-aba6-545c531825cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mup4rrryzh2l", "content": "\ud83d\udce2 Injection SQL de second ordre non authentifi\u00e9e dans All-in-One WP Migration and Backup (CVE-2026-19949)\n\nCet article d\u00e9taille une vuln\u00e9rabilit\u00e9 critique d\u00e9couverte le 14 ao\u00fbt 2026 dans le plugin WordPress All-in-One\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#WordPress #RemoteCodeExecution #Cyberveille", "creation_timestamp": "2026-09-04T14:00:07.438634Z"}, {"uuid": "725e59de-4bc2-4096-a828-ab6b70bf92de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mupt25aosk2u", "content": "CVE-2026-19949\u3001\u6570\u767e\u4e07\u4ef6\u306eWordPress\u30b5\u30a4\u30c8\u304c\u8106\u5f31\u306a\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u7a3c\u50cd\u4e2d\n\n\u672c\u6765\u306f\u30b5\u30a4\u30c8\u306e\u30c8\u30e9\u30d6\u30eb\u5fa9\u65e7\u3092\u52a9\u3051\u308b\u306f\u305a\u306eWordPress\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30c4\u30fc\u30eb\u304c\u3001\u9006\u306b\u653b\u6483\u306e\u5f15\u304d\u91d1\u306b\u306a\u308a\u304b\u306d\u306a\u3044\u72b6\u6cc1\u3067\u3059\u3002 \u7814\u7a76\u8005\u3089\u306f\u3001All-in-One WP Migration and Backup\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30d0\u30fc\u30b8\u30e7\u30f37.109\u4ee5\u524d\u306b\u5f71\u97ff\u3059\u308b\u6df1\u523b\u5ea6\u306e\u9ad8\u3044SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u6b20\u9665...", "creation_timestamp": "2026-09-04T20:38:29.906525Z"}, {"uuid": "d32a0b85-5a24-40d6-b5e0-979b7f92fcea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/", "content": "The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.\n\nThe post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability appeared first on SecurityWeek.", "creation_timestamp": "2026-09-05T01:00:34.911878Z"}, {"uuid": "51aba456-d7a6-4f8f-baa7-1314f059cded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3murkqw3x532c", "content": "All-in-One WP Migration Flaw Hits 3M WordPress Sites https://0daynews.com/articles/2026-09-04-all-in-one-wp-migration-cve-2026-19949-sql-injection", "creation_timestamp": "2026-09-05T13:15:29.640920Z"}, {"uuid": "c5fcec69-4ed0-4cb2-bd97-c3c7f3ed7c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3musx66t6ea2b", "content": "All-in-One WP Migration Flaw Hits 3M WordPress Sites \u2014 Unauthenticated SQL injection in All-in-One WP Migration and\u2026 https://0daynews.com/articles/2026-09-04-all-in-one-wp-migration-cve-2026-19949-sql-injection?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-963", "creation_timestamp": "2026-09-06T02:30:19.058117Z"}, {"uuid": "157ce5f7-1c46-42d5-b79e-62d81a0efb6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/xe964jSyuZ2TO2raaooyZjlU2hWxY5G_P4QQhWoWmWghG0E", "content": "", "creation_timestamp": "2026-09-06T18:00:05.722471Z"}, {"uuid": "6b1fdcab-387a-4b31-b0d4-53a4a3238e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/xe964jSyuZ2TO2raaooyZjlU2hWxY5G_P4QQhWoWmWghG0E", "content": "", "creation_timestamp": "2026-09-07T01:00:07.704424Z"}, {"uuid": "a5a07ba4-bad9-4d86-b3d5-af095a657000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "Telegram/yuT2NAUY-P_iQf71KZdH7THqaqJP0LaiU2b3FS1yHkoYVfk", "content": "", "creation_timestamp": "2026-09-08T12:00:04.323575Z"}, {"uuid": "305e97f0-6b74-4526-abb0-d3f57006c068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/yuT2NAUY-P_iQf71KZdH7THqaqJP0LaiU2b3FS1yHkoYVfk", "content": "", "creation_timestamp": "2026-09-09T00:00:29.722943Z"}, {"uuid": "3f03068d-4b39-48e5-bd58-15b6a3b09885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/GithubRedTeam/101638", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-AIOWPM-CVE-2026-19949\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 686f6c61\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-08 09:57:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <= 7.109 via regex de replace_table_values. Laboratorio Docker + payload derivado (leak de ai1wm_secret_key por REST anonima) + RCE con importacion anonima.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:05.492194Z"}, {"uuid": "a64d748d-1453-4cd6-ae00-fd1cf62760c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101638", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-AIOWPM-CVE-2026-19949\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 686f6c61\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-08 09:57:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <= 7.109 via regex de replace_table_values. Laboratorio Docker + payload derivado (leak de ai1wm_secret_key por REST anonima) + RCE con importacion anonima.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:50.662488Z"}, {"uuid": "44a9f0ee-bd4c-467b-88a2-8b92691d8a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19941", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities_20260918", "content": "", "creation_timestamp": "2026-09-18T04:45:38.968350Z"}, {"uuid": "01cdb604-0038-4939-bdac-3057dbf1dd8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/VulnerabilityNews/44315", "content": "Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability\n\nThe high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.\nThe post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/", "creation_timestamp": "2026-09-18T12:00:05.674579Z"}]}