Source 120 JournalPlain-English notes on websites, security and keeping things running.https://source120.com/PHP2Shell: the critical PHP flaw, and what it could do to a WordPress businesshttps://source120.com/blog/php2shell-critical-php-flaw-wordpress/https://source120.com/blog/php2shell-critical-php-flaw-wordpress/Two critical PHP vulnerabilities were fixed on 21 October 2026. What they allow, why an up-to-date WordPress site was not enough on its own, and how I protected the sites I look after.Thu, 22 Oct 2026 00:00:00 GMT