WordPress Backup Migration plugin < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-Login vulnerability

Admin+ Privilege Escalation via Post-Restore Auto-Login vulnerability discovered by Thanh Lam Tang in WordPress Plugin Backup Migration versions 2.1.7...

CVE-2026-18216: Improper Authentication

The Backup Migration WordPress plugin before 2.1.7 does not properly restrict a post-restore automatic login mechanism, allowing a user who administers one site of a multisite network to obtain a long-lived authenticated session as an administrator of another site in the same network, without...

Preserving Restored InterSystems IRIS Data Before Removing a Storage System

Summary Epic EHR System Protection, introduced in Veeam Backup & Replication 13.1, can restore an InterSystems IRIS instance either from a backup or from a storage snapshot. When Restoring from Backup, data is copied from the backup repository to the target ODB operational database server, and is...