October 21, 2026

Two critical vulnerabilities in PHP, the programming language that powers WordPress, Drupal, Magento, and most of the web, were disclosed this week with a severity score of 9.2 out of 10. Security experts described the potential for “wormable malware affecting big chunks of the internet.” Wild Iris has already patched our hosted clients. If your site isn’t on managed hosting, here’s what you need to know.