Search is temporarily unavailable.
PHP fixes two critical flaws: what to check if you have a website
On October 21, 2026, PHP released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix CVE-2026-109618 and CVE-2026-109619, two critical remote code execution bugs. What it means for personal WordPress sites, hosting accounts, and everyone else.
Michael Narehood7 min read
