A quick heads-up on a security issue that came out this week.
On October 21, PHP (the software that runs WordPress and most websites) released fixes for two critical vulnerabilities that could let an attacker run code on a server without logging in.
You don't need to do anything. Your site's server was secured before the fixes were even published, and it's now running patched versions of PHP.
