Blog

AllVulnerabiltiy AdvisoryWordPressReactPHPNEXT.JSEmergency PatchingPreemptive Defense
PHP2Shell: Patch Now, Then Close the Exposure Window
Vulnerabiltiy Advisory

PHP2Shell: Patch Now, Then Close the Exposure Window

Two critical PHP flaws allow unauthenticated remote code execution on most PHP servers. Here is what to patch, what to do if you can't patch today, and where a preemptive WAF fits.

Critical WordPress RCE Vulnerability: wp2shell (CVE-2026-63030, CVE-2026-60137)
WordPress

Critical WordPress RCE Vulnerability: wp2shell (CVE-2026-63030, CVE-2026-60137)

A critical pre-authentication remote code execution vulnerability in WordPress Core allows anonymous attackers to fully compromise any stock WordPress installation. Over 500 million websites are potentially affected.