Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.
XFEDI
ActivityPubConversation
@GossiTheDog
Looks like Calif may have a PoC called php2shell that works against WordPress.
Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.
@GossiTheDog
Looks like Calif may have a PoC called php2shell that works against WordPress.