PHP Security Update: What WordPress Website Owners Need to Know

Two critical PHP security vulnerabilities—CVE-2026-109618 and CVE-2026-109619—have been identified, and security updates are now available.

PHP powers WordPress and many other content management systems. If your website uses an affected PHP version, your hosting provider needs to apply the appropriate security updates.

Hosted with Nearby Web Design?

Our team manages your hosting environment and coordinates the necessary security updates. If you have questions about your website’s update status, please get in touch.

On our website maintenance plan?

If we maintain your website but it’s hosted elsewhere, we’re checking with your hosting provider to confirm that the necessary updates are being applied. We’ll contact you if any action is required.

Not on a maintenance plan?

Contact your hosting provider to confirm that your website is running a patched PHP version.

If you’re unsure where to start or would like help with ongoing website care, Nearby Web Design is here to help.