Two weeks after ServMask shipped version 7.110 of All-in-One WP Migration and Backup, the release that closed an unauthenticated SQL injection tracked as CVE-2026-19949, the WordPress.org version statistics show that only 35 percent of active installations are running the patched release. With the directory listing more than five million active installations, that leaves roughly 3.2 million sites running vulnerable … Continue reading Nearly Two-Thirds of All-in-One WP Migration Installs Remain Unpatched Two Weeks Later