On 21 October 2026, the PHP project released emergency fixes for two critical vulnerabilities: CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell. Both can allow an attacker to run code on an affected server without logging in. The PHP security advisory urges users to update immediately.
Tipping the iceberg: the WordPress era is over
calendar_today
October 23, 2026
domain
tinacms