WordPress security company Wordefence reported ongoing PHP2Shell-related requests across over 5 million protected sites, indicating continued scanning and exploitation attempts.
The vulnerability or weakness
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-109618 | 9.2 | CRITICAL | Yes, added 2026-10-26 | 2026-10-29 |
| CVE-2026-109619 | 9.2 | CRITICAL | Yes, added 2026-10-26 | 2026-10-29 |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
- Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass (2026-10-28)
- HPE Patches Dozens of Critical Flaws in Networking Products (2026-10-27)
- Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes (2026-10-26)
- CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud (2026-10-24)
- Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws (2026-10-23) - The Hacker News
Business impact
Organizations face the risk of unauthorized access and potential data breaches, impacting operations and security measures.
Industries affected
This issue affects a wide range of industries, particularly those relying on WordPress for their web content management.
Users affected
End users could see their WordPress sites compromised, leading to potential loss of data and trust in their online presence.
