PHP team patches critical vulnerabilities threatening WordPress and online stores
Two bugs allow a server to be taken over without logging in. Updating WordPress or plugins will not help here: the patch must be installed by the hosting provider, and a maintenance outage requires a response code that preserves the site's position in Google.