Pinned
🚨 A PHP zero day drops today.
Two critical flaws (CVE-2026-109618 and CVE-2026-109619) let attackers run code on your server without logging in, and PHP powers around 75% of the web including every WordPress site.
The patch releases at 14:00 UTC, and attacks are expected


