PHP project

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 21, 2026
Last mentioned4d ago

Timeline

2 articles · newest first

PHP project issues critical security release; sites urged to update

Two critical flaws affect any PHP application; no WordPress update is planned, and PHP before 8.2 is unsupported.

WordPress.org · Securityupdated Oct 21, 23:02 UTC · 3d agofirst Oct 21, 13:44 UTC · 4d agoVulnerability 30 sources2 · 1 read

PHP rushes emergency patches as early php2shell attacks reported

Cloudflare says early attacks are emerging and has pushed temporary firewall rules to all customers, including free accounts.

CyberScoopOct 21, 13:40 UTC · 4d agoExploit / PoCExploited30 sourcesCVE-2026-109618 CVE-2026-109619

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 4d agophpPoC ×13
CVE-2026-10961812%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 4d agophpPoC ×25

Appears with

PHPproduct · 2
Cloudflarevendor · 1
Joomlaproduct · 1
UK National Cyber Security Centreorganization · 1
WordPressproduct · 1
watchTowrorganization · 1
National Cyber Security Centreorganization · 1
CERT-EUorganization · 1
Drupalproduct · 1
PHP Groupvendor · 1
Laravelproduct · 1
WordPressorganization · 1

Entities are extracted by the model from each article. First seen Oct 21, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.