Post warns PHP-based services of two critical vulnerabilities, fixes due

A Mastodon post by Doug Belshaw says PHP confirmed two critical vulnerabilities, each rated 9.2/10, affecting PHP-based services like WordPress, Moodle and Nextcloud. Fixes are reportedly scheduled for October 21.

Timeline

1. 21 Oct, 04:55 UTCPost says PHP confirmed two critical flaws

Top sources

• 🚨 A heads-up for anyone running # WordPress , # Moodle , # Nextcloud or other PHP-based services. PHP has confirmed twoDoug Belshaw