Security Alerts
WordPress vulnerability news and active security incidents: what’s affected, what’s at risk, and what to do about it right now.
Update PHP for WordPress: Critical RCE Security Patches Released
Updated October 21, 2026: The PHP development team has released emergency security patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Both carry
cPanel CVE-2026-87899 Lets Hosting Accounts Gain Root on Shared Servers
cPanel Flaw Lets One Hosting Account Gain Root Access on Shared Servers cPanel has patched a vulnerability that allows an authenticated hosting
wp2shell: Critical WordPress Core RCE, Patch Now
If your site runs WordPress 6.9 or 7.0, check your version before you finish reading this. A vulnerability chain in WordPress core,