Follow the latest coverage, related explainers and connected technology stories.
An undocumented SQL injection vulnerability allows attackers to execute remote code and take control of sites using the All-in-One WP Migration and Backup plugin. ServMask issued the fix in version 7.110, but approximately 3.25 million sites are still running a vulnerable version, according to the figures cited in the report.