WordPress Core Flaw Exploited: CISA Adds CVE-2026-119977 to KEV
Attackers are now exploiting a WordPress core flaw, so site owners should check their version today. The bug sits in how WordPress installs full-package core updates, and it can let an unauthenticated attacker run code on a site. The US cybersecurity…
Read More
PHP2Shell: Critical PHP Flaws Are Under Attack, and Most Websites Need to Update Now
Hackers are already trying to exploit PHP2Shell, two critical flaws in PHP, the programming language behind roughly 70% of websites, including those built on WordPress. The PHP project released emergency fixes on October 21. The US National Security…
Read More