BionicWP
Home

BionicWP Powered Sites Protected Against Critical PHP Vulnerabilities

Edited

The PHP project has released fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which could allow attackers to execute code remotely without authentication. You can find the technical details in the official PHP security advisory.

BionicWP sites are already protected against both vulnerabilities. The necessary protections are in place at the infrastructure level, covering:

  • All PHP versions available on BionicWP.

  • Production, staging, and development environments.

  • All BionicWP-hosted sites, with no action required from customers.

If you manage PHP installations outside of BionicWP, we recommend following the PHP project's update guidance to ensure those systems are protected as well.

Your BionicWP sites are covered, and there's nothing you need to change.

Pricing