PHP Security Update (php2shell): What WordPress Site Owners Should Do
Last updated: 22 October 2026 Short answer: On 21 October 2026, the PHP project released urgent security fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, nicknamed "php2shell". They affect almost every PHP version and can let an attacker run