PHP2Shell: Two Critical PHP Bugs (CVE-2026-109618, CVE-2026-109619) and What Website Owners Must Do Now
Two critical PHP remote code execution flaws were patched on 21 October 2026. Here is what happened, who is affected, and a simple checklist for WordPress and business website owners.