The Cybersecurity and Infrastructure Security Agency said critical vulnerabilities in PHP, often a component of other software such as Wordpress, require immediate patching.
Details: CISA strongly urged organizations to immediately patch vulnerabilities that allow for unauthenticated remote code execution in PHP and affect all PHP installations serving web requests.