PHP released emergency fixes on Oct 21 for two critical flaws, nicknamed PHP2Shell, that can let attackers take over a web server without logging in. Updating WordPress or your plugins won't fix it, because the PHP on your server needs the patch, so ask your host to confirm it's installed. AI makes it faster to build sites and faster to find their weak spots, so basic upkeep matters.