Iptor Security Update | Critical PHP Vulnerabilities (PHP2Shell)
Last updated 22nd October 2026 Critical PHP Vulnerabilities (PHP2Shell) On 21 October 2026, the PHP project released security fixes for two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, widely referred to as “PHP2Shell“. PHP is the server-side language used by many websites, including sites built on WordPress. The vulnerabilities are