The AI Double-Edged Sword: Understanding the Critical “PHP2Shell” Crisis Facing WordPress Sites
A massive cybersecurity scramble has hit the web, and it has nothing to do with a bad plugin or an unclicked WordPress update. A critical vulnerability in PHP core—the programming language powering WordPress and roughly 70% of the internet—has been uncovered.Dubbed PHP2Shell (tracked as CVE-2026-109618 and CVE-2026-109619), this flaw allows