Skip to content

Source 120 / Journal

Notes from
the studio.

Plain-English notes on websites, security and keeping things running. Written by Andrew, usually when something worth explaining has just happened.

Latest posts Subscribe by RSS

Latest
posts.

22 October 2026
Security, WordPress, PHP
PHP2Shell: the critical PHP flaw, and what it could do to a WordPress business
Two critical PHP vulnerabilities were fixed on 21 October 2026. What they allow, why an up-to-date WordPress site was not enough on its own, and how I protected the sites I look after.
Read the post