22/10/2026
🚨 WEBSITE OWNERS, A QUICK SECURITY HEADS UP! 🚨
If you've got a website, particularly one running on WordPress, this is worth checking!
Two serious security vulnerabilities have been reported affecting PHP, which is the software that helps power millions of websites.
Now, before anyone panics, this doesn't mean your website has been hacked! ❤️
The good news is that if you're using a reputable hosting provider, they should be managing PHP security updates at server level.
Here's what I'd recommend doing today:
✅ Contact your website hosting provider.
✅ Ask whether they've applied the latest PHP security patches relating to CVE-2026-109618 and CVE-2026-109619.
✅ Check whether there's anything you need to do yourself.
And while you're at it, make sure your WordPress website, themes and plugins are up to date too!
💗 Not sure what PHP is?
Think of it as part of the engine that makes your website work. Your hosting company generally looks after that engine, while you look after the WordPress side of things.
My advice? Don't panic, just check.
A quick message to your hosting provider can give you peace of mind.
And please, don't start randomly changing PHP versions yourself. That's a fabulous way to turn a security check into a broken website. 😂
Who do you host your website with? 👇