Critical PHP Core Security Flaws Affect Websites, Including WordPress via @sejou

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders. On some servers, that

PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP

<p>PHP has released emergency updates for two severe runtime flaws named PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619.</p> <p>Affecting versions back to PHP 5.4, the

The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has