22/10/2026
PHP published two critical security fixes on 21 October. They affect the software that runs most websites, including WordPress.
If your site is hosted with us, you do not need to do anything. We have already installed the 21 October PHP updates, and extra firewall protection is in place as well.
This short note explains what the issues are, in plain English, and what we have done:
spirehosting.co.uk/blog/php-security-upd…109618-cve-2026-109619/