PHP2Shell: What the Critical PHP RCE Means for Your WordPress Site (Act Today, Oct 21)
PHP2Shell is the name researchers have given to two critical vulnerabilities in PHP — CVE-2026-109618 and CVE-2026-109619 — both rated 9.2 on the CVSS v4.0 scale by the PHP security team. PHP ships an out-of-band security release fixing them today, Wednesday 21 October 2026, at 14:00 UTC (3:00 p.m. WAT). If your WordPress site runs … Read more