22/10/2026
Critical PHP vulnerabilities: let us secure your site.
On 21 October, PHP released emergency fixes for two critical flaws (CVE-2026-109618 and CVE-2026-109619). Both can allow remote code ex*****on without a login.
Fixed versions: PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. PHP 8.1 and older get no official fix.
Updating is the only complete answer, and a rushed update can break your site. Our team handles it end to end:
✔ PHP version and exposure check
✔ Patch or migration to a supported version
✔ Fixes for Laravel, WordPress, Shopify-connected, and custom PHP code
✔ Staging tests, then a clean restart and verification
✔ Ongoing maintenance, and you keep 100% ownership of your code
Offices in Dublin and New Jersey. Message us or visit https://raydiantwebs.com/contact-us for a rapid PHP check.