Critical security flaws in PHP affect many sites, including WordPress. Read our guide
Get in touch
Follow us
Insights
Keeping your website and the data behind it safe – the common threats and the habits that stop them.
22 October 2026 · 6 min read
Two critical security flaws in PHP – nicknamed PHP2Shell – were made public on 20 October 2026, and if your business website runs on WordPress, it's almost certainly affected. Fixes were released on 21 October, so the priority now is making sure your website is on a patched version as soon as possible. This isn't […]