Features, news, and more:
See what’s been going on in
Automattic’s world.

For media inquiries and materials, visit our Press page.

Your Sites Are Protected Against the PHP2Shell Vulnerabilities

Today, the PHP project released security updates for two critical vulnerabilities in PHP itself, tracked as CVE-2026-109618 and CVE-2026-109619 and nicknamed “PHP2Shell.” Both are rated 9.2 out of 10 on the Common Vulnerability Scoring System (CVSS), the industry-standard scale for how severe a security flaw is. Anything from 9.0 up is classed as Critical, the…


WRONG AGAIN

WP Engine’s motion is a desperate attempt to get sanctions and other extreme remedies because Matt used ephemeral messaging in personal communications with romantic partners having nothing to do with this case. Here’s what really happened, as the brief we filed tonight shows: We preserved and collected. A litigation hold was issued to our employees, including Matt.…

Something went wrong. Please refresh the page and/or try again.