The short answer: In October 2026, the makers of PHP announced two serious flaws, CVE-2026-109618 and CVE-2026-109619. PHP is the behind-the-scenes software that powers a large share of business websites, including most WordPress sites. The flaws can let a stranger...





