🚨 A heads-up for anyone running #WordPress, #Moodle, #Nextcloud or other PHP-based services. PHP has confirmed two critical vulnerabilities, both rated 9.2/10. Fixes are scheduled for today, 21 October, at 14:00 UTC. Prepare to patch PHP, not just your applications. CERT-EU advises considering temporary isolation of public-facing services if prompt patching isn't possible. It sounds pretty bad. Affected versions are not yet confirmed but I've heard 5.4+ https://www.php.net #PHP #Security #SelfHosting