At 3am Thursday morning (NZST) the PHP foundation released updates to fix two serious critical PHP vulnerabilities. PHP is the underlying technology upon which sites built with WordPress, Drupal, Silverstripe and most other popular website frameworks run. These vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, could allow ...