On October 21, GoDaddy had patched every PHP version on its Managed Hosting for WordPress by 19:30 UTC. Its Web Hosting servers, which run custom PHP packages from a vendor, were fully patched at 13:30 UTC the next day. Both rollouts addressed PHP2Shell, two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that can under the right conditions let … Continue reading PHP2Shell Timeline: How the Hosting Industry Reacted