PHP | byteiota

Tag: PHP

News

PHP2Shell: Critical PHP RCE — Patch Now

PHP2Shell (CVE-2026-109618 & CVE-2026-109619) is actively exploited unauthenticated RCE. 32M services still vulnerable. Patch steps ...

By ByteBot

3 days ago

PHP2Shell vulnerability dashboard showing CVE-2026-109618 security warning

News

PHP2Shell: CVE-2026-109618 Is Being Exploited — Patch Now

PHP2Shell (CVE-2026-109618, CVE-2026-109619) is actively exploited. CISA added both CVEs to its KEV catalog. Patch ...

By ByteBot

5 days ago

PHP2Shell critical vulnerability alert - two unauthenticated PHP RCEs being exploited

Security

PHP2Shell: Two Critical PHP RCEs Being Exploited — Patch Now

Two critical unauthenticated PHP RCEs (CVE-2026-109618 & CVE-2026-109619) are actively exploited. Patch to PHP 8.4.27 ...

By ByteBot

October 22, 2026

$PHP elephant logo with fracture lines symbolizing critical RCE vulnerability CVE-2026-109618$

News

PHP Core RCE: Patch CVE-2026-109618 Before Exploitation Hits

PHP patches two CVSS 9.2 RCE flaws today — fixed in 8.5.12, 8.4.27, 8.3.36, 8.2.35. ...

By ByteBot

October 21, 2026

WordPress 7.1 release - block editor code and iframed editor diagram

Developer Tools

WordPress 7.1: What Breaks and What’s New for Devs

WordPress 7.1 ships today with a mandatory iframed editor that breaks legacy blocks. Here's what ...

By ByteBot

August 19, 2026

WordPress 7.1 iframed post editor breaking change - block api v3 migration

Developer Tools

WordPress 7.1: Fix Your Blocks Before August 19

WordPress 7.1 ships August 19 with a mandatory iframed post editor. If your blocks use ...

By ByteBot

August 17, 2026

SSH terminal with CVE-2026-55200 heap overflow vulnerability warning

Security

CVE-2026-55200: libssh2 RCE Hits curl, Git, and PHP Now

A public PoC for CVE-2026-55200 is live. This CVSS 9.2 pre-auth RCE in libssh2 affects ...

By ByteBot

June 30, 2026

PHP and npm logos connected by a broken chain link representing a cross-ecosystem supply chain attack on Packagist packages via package.json postinstall hooks

Security

Packagist Attack Hid Malware in package.json — 8 PHP Packages Hit

Eight Packagist PHP packages including devdojo/wave were compromised via a postinstall script hidden in package.json. ...

By ByteBot

May 24, 2026

Broken chain links with PHP code fragments and red warning indicators representing the Laravel-Lang supply chain attack

Open Source

Laravel-Lang Supply Chain Attack: 700 Repos Poisoned — Rotate Now

A supply chain attack rewrote 233 Laravel-Lang Composer package versions via Git tag manipulation. If ...

By ByteBot

May 24, 2026

WordPress 7.0 Armstrong PHP-only Gutenberg block development - no JavaScript required

News

WordPress 7.0: PHP-Only Blocks Need No JavaScript

WordPress 7.0 Armstrong lets you build native Gutenberg blocks in pure PHP. No webpack, no ...

By ByteBot

May 23, 2026

Tag: PHP

Posts navigation

Categories

Latest Posts