News
Critical PHP remote code execution vulnerabilities disclosed (CVE‑2026‑109618, CVE‑2026‑109619)
Flaws affect all PHP versions from 5 onward; patches required to PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12; DigitalOcean auto‑patches WordPress on Cloudways, others must update manually.