PHP2Shell security alert graphic showing a cracked shield, the PHP vulnerability CVE numbers and the patched PHP versions

PHP2Shell: The PHP Flaw That Shook the Web — and What It Means for Your WordPress Site

Website Security, AI /

Last week the PHP project shipped an emergency fix for two critical flaws in PHP itself, nicknamed PHP2Shell. If your website runs on PHP (and around 70% of websites do, including every WordPress site), your server was exposed until its PHP version was patched. The flaws are tracked as CVE-2026-109618 and CVE-2026-109619. Both are rated

PHP2Shell: The PHP Flaw That Shook the Web — and What It Means for Your WordPress Site Read More »