Two critical CVEs affecting PHP

Dear Customer, Yesterday was a tough day for much of the internet with the leaked embargoed announcement of two critical CVEs affecting PHP – CVE-2026-109618 and CVE-2026-109619. Both of these vulnerabilities required every web host running PHP, including WP Engine, to apply PHP patches immediately upon release. Importantly, our customers do not need to take […] The post Two critical CVEs affecting PHP appeared first on WP Engine® .