Tag: CVE
PHP security vulnerabilities and emergency patching
Two critical, unauthenticated remote-code-execution flaws in PHP itself (not WordPress or any app built on it) were leaked before a patch existed. Details and a tool called PHP2Shell spread online on October 20. PHP shipped an emergency fix on October 21, slightly ahead of schedule. Governments and universities in some European countries and elsewhere pulled […]