Post

CSS by T. Afif

@css-only.dev

<?php phpinfo(); ?> 🤞🤞

bjkeefe

@bjkeefe.bsky.social

icymi: bsky.app/profile/ifin...

IFIN@ifin-intel.org

The official advisory and patches have been released. We continue to track emergence of proofs-of-concept and exploits. ifin.network/t/cve-2026-1... #PHP2Shell #ThreatIntelligence #ThreatIntel #IFIN

ifin.networkCVE-2026-109618, CVE-2026-109619: Remote Code Execution in PHPCVSSv3: 9.2 Last Updated: 2026-10-21T14:06:57Z (UTC) What’s Happening On 2026-10-21T07:00:00Z (UTC), PHP published an advisory about two critical vulnerabilities in PHP. The GitHub security issu...

CSS by T. Afif

@css-only.dev

I am following but, in my case, I can only wait 😑

21/10/26, 3:01 pm0 reposts1 like

bjkeefe

@bjkeefe.bsky.social

Ah. I wondered from your OP if you were running a site that ran on PHP, like a WordPress site or something. (No offense intended! ;))

CSS by T. Afif

@css-only.dev

I do, but I do not have control to patch the PHP myself so I am watching the info() and waiting 😅

bjkeefe

@bjkeefe.bsky.social

So, css-tip dot com, etc., are WP driven? If so, I guess I have to update what I expect to see. I (still) think of WP as driving blogs, with a fairly standard look.

CSS by T. Afif

@css-only.dev

css-tip is the only one safe (eleventy + github) but some of the others rely on a few php scripting.