CVE-2026-19949 in All-in-One WP Migration and Backup may affect 3.2M WordPress sites. A second-order SQL injection in archive restore could enable RCE via trackbacks; only 35% are patched to 7.110. #WordPress #CVE202619949 #SQLInjection