Critical PHP Flaws Put WordPress and Other Websites at Risk
PHP has released security updates for two critical 9.2-rated vulnerabilities that can enable unauthenticated remote code execution. The patched versions are 8.2.35, 8.3.36, 8.4.27, and 8.5.12. WordPress and other PHP-based site owners should check their PHP runtime and hosting provider’s patch status.