🧰 Wordfence

The items that name it 9

• PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
  articleas tools2026-10-30

  Defiant's web security service, which reported over 77,000 PHP2Shell-related requests from more than 2,000 IP addresses as of October 28 and no confirmed WordPress compromises.

• Fresh WordPress Vulnerability in Attackers’ Crosshairs
  articleas tools2026-10-30

  Provided telemetry and a new firewall rule; the first match arrived nine minutes after deployment, and it recorded more than 18,500 requests in the first 21 hours targeting staged setup-config.php installer paths. It has not reported successful compromises.

• lee1981 (@lee1981b) on X
  advisoryas tools2026-10-28

  Published the advisory and CNA record for CVE-2026-92885, describing the typo in the Facebook token-verification guard and naming 2.0.6.3 as the patched version

• CVE-2026-109618 / CVE-2026-109619 | NodeZero Rapid Response Check Now Available
  advisoryas classification.key entities2026-10-23
• Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
  articleas classification.key entities2026-10-23
• PHP critical vulnerabilities rated 9.2 as attacks emerge and sites go offline
  articleas classification.key entities2026-10-21
• PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out
  articleas classification.key entities2026-10-21
• lee1981 (@lee1981b) on X
  advisoryas classification.key entities2026-10-10
• Orca Security: CVE-2026-8206
  advisoryas tools2026-06-03

  Reported blocking 59 attacks targeting this vulnerability within a 24-hour period