On 21 October 2026, the PHP project released fixes for two critical security vulnerabilities, publicly nicknamed “PHP2Shell”. PHP is the programming language that runs WordPress and most other websites hosted with us. On servers without the fix, these flaws could let an attacker run their own code. All ModHost servers are protected. You ...