Is my WordPress site affected by the PHP security flaw?
Probably, unless someone has already patched the server it runs on. The flaw is in PHP itself, the language WordPress is written in, so nearly every WordPress site in the world was exposed until its server was updated. Nicknamed PHP2Shell, it was disclosed on 20 October 2026 and has led the news since, with government […]