Tag: PHP

Oct 4, 2026 ·

Asif Mughal · 125

CVE-2026-87902: A Critical WordPress Core RCE Flaw Under Active Attack

CVE-2026-87902 is a critical WordPress core RCE flaw, no plugin needed, affecting every version from 4.7 through 7.1.1. Here's how it works, why Docker and cPanel setups are affected by default, and what to check if you were already hit.

Oct 4, 2026 ·

Asif Mughal · 91

Laravel Version Support Schedule Going Into 2027: Which to Run

Laravel 11 has had no security fixes since March 2026, and Laravel 12 loses its last security patches on February 24, 2027. Here's the full official Laravel support schedule going into 2027, and which version to actually target now.

Sep 25, 2026 ·

Asif Mughal · 189

PHP End of Life Schedule Going Into 2027: Which Version to Actually Run

PHP 8.2 reaches end of life December 31, 2026, the same day PHP 8.4 quietly loses active support. Here's the full official PHP schedule going into 2027, and which version to actually target for a new or existing project.

Sep 21, 2026 ·

Asif Mughal · 203

The Events Calendar Had Two Critical RCE Flaws. Here's What to Check

Two critical, unauthenticated CVEs (CVSS 9.8) hit The Events Calendar plugin a day apart, putting 600,000+ WordPress sites at risk. Here's what each attack path does, how to check for compromise, and why this landed in an unusually busy month for WordPress security.

Sep 18, 2026 ·

Asif Mughal · 95

Specified Key Was Too Long: The Real Fix, Not the One-Liner Everyone Copies

The usual fix for this Laravel migration error caps every unspecified string column at 191 characters, not just the one that failed. Here is a targeted fix instead, and whether this error still shows up on modern MySQL 8.

Sep 17, 2026 ·

Asif Mughal · 122

PHP Supply Chain Attacks Are Rising. Here Is What Composer Actually Catches

Composer added real malware protection this year through composer audit and Packagist's new scanning, but a recent attack hid malicious code in package.json instead. Here is what these tools actually catch, and the dependency file most PHP security reviews skip.

Sep 7, 2026 ·

Asif Mughal · 124

WordPress 7.1 Broke WP Rocket. Here Is the Fix If Your Site Is Down

WordPress 7.1 triggers a fatal error in WP Rocket versions up to 3.23.2.1, taking down the entire site including wp-admin. Here is who is affected, the fix in WP Rocket 3.23.2.2, and how to recover over FTP if you are already locked out.

Sep 7, 2026 ·

Asif Mughal · 92

Elementor Pro Had a Critical File Upload Vulnerability. Here Is How to Check

CVE-2026-32475 is a critical, unauthenticated file upload flaw in Elementor Pro up to 4.2.1, fixed in 4.2.2. Here is how to check your version, why an expired licence can silently block the fix, and one server rule that guards against the whole category of attack.

Sep 7, 2026 ·

Asif Mughal · 103

A Composer Bug Was Leaking GitHub Tokens Into Your CI Logs. Here's How to Check

A Composer bug leaked GitHub Actions tokens straight into CI logs when it encountered GitHub's new token format. Here's how to check if you were affected and what to actually do about it.

Aug 30, 2026 ·

Asif Mughal · 128

WordPress 7.0 Raised Its Minimum PHP Version. Here Is What Actually Changed

WordPress 7.0 raised the minimum PHP version to 7.4, but some sites online are also claiming it raised the MySQL requirement, and one of them later corrected that claim. Here is what actually changed, straight from WordPress's own official announcement.

Aug 30, 2026 ·

Asif Mughal · 94

Why Your WordPress Error Log Is Full of PHP Deprecation Warnings After Upgrading

Upgraded PHP on your WordPress VPS and now your error log is full of "implicitly marking parameter as nullable" warnings? Here's why it happens, why it matters more than it looks, and how to actually deal with it.

Aug 29, 2026 ·

Asif Mughal · 111

PHP 8.1 Is End of Life. Here Is How to Check and Upgrade Safely

PHP 8.1 stopped getting security patches on December 31, 2025, and roughly half of top PHP sites are reportedly still running an end of life version. Here is how to check what you are actually running, and how to upgrade without breaking your WordPress site or Laravel app.