RCE Archive
Critical PHP remote code execution flaws trigger emergency security response
Two vulnerabilities rated CVSS 4.0 at 9.2 could expose PHP-powered websites and servers to remote code execution. Patchstack reports active exploitation, while administrators await an emergency security release scheduled for 14:00 UTC today. The PHP ecosystem is facing an urgent security incident following the disclosure of two
Critical WordPress vulnerability enables unauthenticated path traversal and conditional RCE
A critical security vulnerability in WordPress could allow an unauthenticated attacker to abuse page-template resolution to include a locally accessible PHP file outside the active theme directory, potentially leading to remote code execution (RCE) under specific server and theme configurations. The vulnerability, tracked as CVE-2026-87902 and identified