Actively exploitedBlog
Vulnerabilities: security news
Critical vulnerabilities, actively exploited flaws, WordPress plugin issues, breaches and malware campaigns, explained for people who run websites: what happened, who is affected and what to do now. Every article lists its sources.
3 articles in Vulnerabilities
Actively exploited
Actively exploitedPHP CVE-2026-109618: Exploited RCE Flaw and How to Patch
Two critical PHP flaws can allow unauthenticated remote code execution. CISA lists CVE-2026-109618 as exploited. Update PHP to a fixed release and restart your workers.
Actively exploited