Security PHP2Shell: What WordPress Website Owners Need to Know and Do Last updated: 22 October 2026, 14:00 Key takeaways PHP2Shell is the nickname for two critical flaws in PHP (CVE-2026-109618 and CVE-2026-109619), announced on 21 October