Triggered by PHP vulnerabilities, I tried updating AI and WordPress safely [PHP 7.4 to 8.5]

IntroductionPreviously, when I changed the PHP version during a WordPress update, an HTTP 500 (Internal Server Error) ...
The Hacker News

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

CISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a ...

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.
InfoQ

PHP Patches Two Critical RCE Flaws That Were Already under Attack

PHP released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities allowing unauthenticated remote code ...