PHP2Shell: The Critical PHP Flaw Every Website Owner Must Fix Now

On October 20, 2026, the PHP team announced an emergency: two critical holes in the PHP language itself that can let a stranger run their own code on your server — no password, no account, no clicking anything on your side. Patches landed October 21. If your website runs on PHP (WordPress,…