Tagged

PHP

Security advisories and practical guidance for PHP and WordPress teams: critical flaws, compromised updates, and how to respond.

2 posts

October 26, 2026 · 5 min read

Rank Math PRO's compromised update: why installing 3.0.124 won't clean your WordPress site

For about eleven hours on October 15-16, some downloads of the Rank Math PRO WordPress plugin contained malware that planted a self-rebuilding backdoor. What happened, how to tell if you're affected, and the recovery steps in order.

Cybersecurity

PHP

WordPress

October 26, 2026 · 6 min read

PHP2Shell: two critical PHP core flaws, what they do, and how to actually fix them

Two unauthenticated remote code execution flaws in the PHP core (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) affect every version from 5.4 through 8.5.11. A detailed look at the bugs, the timeline, the conflicting exploitation reports, and a patching checklist.

Cybersecurity

PHP