Tag: CVE
-
PHP Just Shipped Emergency Security Fixes. Check Your Site’s Version.
PHP released emergency updates on October 21 fixing two critical flaws that let an attacker run code on a web server without logging in. The fix comes from your hosting provider, not from WordPress, and sites on older PHP versions get no patch at all.