22nd Oct 2026
PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
22 October 2026
On 21 October the PHP project announced two critical security vulnerabilities in PHP. PHP is the software that runs most websites, including WordPress, WooCommerce and Joomla. The flaws could let an attacker run code on a website without logging in.
What we did
Since 21 October, the Imunify360 firewall on all our servers has ...
