https://salimov.ai/en/security/ New vulnerabilities and zero-days, explained clearly: what is affected, what does not help, what to do today. Free email alerts, with a patch service if you want one. en https://salimov.ai/en/security/php2shell-php-vulnerability/ https://salimov.ai/en/security/php2shell-php-vulnerability/ Wed, 21 Oct 2026 00:00:00 GMT Critical Two critical vulnerabilities in the PHP core (CVSS 9.2) allow unauthenticated remote code execution under certain conditions. A WordPress update does not help — the PHP version on the server has to be updated.