Vulnerabilities
Two Critical PHP Flaws Rated 9.2 Get Fix on October 21
The PHP team will release patches for two high-severity vulnerabilities on Wednesday, affecting all WordPress sites and other PHP applications.
PHP
Everything Patch Herald has reported about PHP: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
9.2-CVSS RCE flaws in PHP 5-8 force urgent patching before Oct 21 leak deadline
Administrators must prepare for urgent updates to PHP versions 5 through 8 after details of two severe remote code execution vulnerabilities leaked early.
Vulnerabilities
High-Severity PHP Injection Flaw Affects sqlparse Library Through Version 0.6.0
The sqlparse library allows remote attackers to execute arbitrary PHP code via crafted SQL input containing unescaped dollar signs.