Critical PHP Security Release

Critical PHP Security Release

The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP. Due to the critical severity of the issues, site owners are encouraged to immediately update their installations of PHP. Your web host may already be working to update PHP and put web application firewall (WAF) rules in place…

Announced on the official WordPress.org news blog on 2026-10-21.

Source

• Critical PHP Security Release — WordPress.org News