What changed: The PHP project announced a security release addressing critical vulnerabilities in PHP. The issues are not specific to WordPress, and no WordPress update is required or planned for them.
Who is affected
Businesses running websites or applications on servers that host PHP applications are affected.
What it means for your business
For businesses using PHP, this means checking whether the PHP installation powering their website needs updating and applying the update if necessary.
What to do
Check your hosting provider’s PHP update status and update PHP as soon as possible if necessary. In WordPress, check your PHP version under Tools > Site Health > Info > Server.
When it takes effect
The source gives no date.
Source: https://wordpress.org/news/2026/10/critical-php-security-release/
