PHP2Shell: Two Critical PHP Vulnerabilities Put WordPress and Web Applications on Alert On October 21, 2026, the PHP development team released emergency security updates addressing two critical remote code execution (RCE) vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619. Both vulnerabilities received a CVSS v4.0 score of 9.2 out of 10. The vulnerabilities, widely referred to asContinue reading “PHP2Shell: Two Critical PHP Vulnerabilities Put WordPress and Web Applications on Alert”