PHP shipped emergency fixes for two flaws rated 9.2. This sits under WordPress and Drupal, so a CMS update does nothing. Your host patches it, and you need to ask.
Read Article →Somebody asked whether anything could be done about AI companies training on your content, and a switch got flipped. Here is how to tell whether that switch is also blocking...
Read Article →The Click2Shell flaw needed an administrator to click a link. This one needs nobody. Two WordPress security releases in five days, and what that cadence means for a monthly patch...
Read Article →PHP 8.2 stops receiving security fixes on December 31, 2026. If your association site was rebuilt in early 2023, this is probably the version it runs. What is not defensible...
Read Article →The budget template arrives the week after Labor Day and your website is one row on it. Four dated deadlines are already written into 2027. Here is which ones actually...
Read Article →Pantheon retires six PHP versions on September 30. If your association site has run untouched for a few years, the risk is not the language version itself, it is the...
Read Article →WordPress 7.0.3 landed on 6 August with eleven security fixes, including a pre-authentication XSS on the login screen that can chain to PHP code execution. Pantheon deployed edge mitigation before...
Read Article →