Learn

Plain-English guides for site owners and the people who look after their sites. Every number has a date and a source.

• PHP2Shell explained. The October 2026 PHP flaws, why WordPress® updates didn't fix them, and what to ask your host.
• PHP 8.2 end of life. On 31 December 2026, about 57% of WordPress sites will run PHP with no official security fixes.
• WordPress security in 2026. Three critical flaws in 14 weeks, and why patching alone can't keep up.
• What is a static WordPress site? How it works, what still works, and the ways to do it.

Last updated 2026-10-24.