Posts tagged “php”

8 posts

23 Oct 2026

Roundcube session desync (CVE-2026-114724): a '!' that turns into object injection

CVE-2026-114724 desyncs Roundcube session parsing with a '!' key into object injection. Patch 1.6.20/1.7.5 and check mail hosts.

securitycveroundcubephp

22 Oct 2026

PHPPresentation flaws (CVE-2026-114403/114404): a slide deck that runs code

PHPPresentation 1.2.0 deserializes objects from uploaded slide files plus a stored XSS. File-upload lessons for PHP apps.

securitycvephpdeserialization

22 Oct 2026

PHP core memory flaws (CVE-2026-109618/109619): when OOM handling corrupts the request

Two Oct 2026 PHP flaws corrupt request memory around OOM handling. Why every Magento host should track PHP patch releases.

securitycvephpinternals

22 Oct 2026

Duplicator plugin PHP Object Injection (CVE-2026-82814): migration input to code execution

CVE-2026-82814 gives unauthenticated PHP Object Injection via Duplicator's migration engine. The deserialization lesson for every PHP shop.

securitycvewordpressphp

03 Sept 2026

Hyva view models: moving logic to PHP

How Hyva view models keep display logic in testable PHP instead of the browser — what they replace from Knockout, how to write one, and when to reach for them.

magento2hyvafrontendphp

23 Aug 2026

Headless & classic WordPress with Govard

How Govard spins up a consistent local WordPress stack and pulls a live site down safely — classic or headless.

govardwordpressphp

21 Aug 2026

Symfony specifics on Govard

How Govard provisions a Symfony dev environment—php-fpm, Mercure, Redis, in-container tests, and multi-app monorepos.

govardsymfonyphp

17 Aug 2026

Running Magento 2 locally with Govard

How Govard turns a multi-service Magento 2 stack, upgrades, and MFTF QA into a handful of reproducible commands.

govardmagento2php

Browse by topic:

2fa accessibility admin adobe-commerce alpine analytics api architecture audit b2b best-practices blueprints bots cache caching catalog checkout ci cicd citrix cli compliance configuration consent content core-web-vitals crawl crushftp csp customization cve database debugging dependencies deploy deployment deserialization detection devops di docker eav ecommerce enterprise erp events file-transfer fortinet fpc frameworks fraud frontend gdpr gitlab go govard graphql hardening headless hyva i18n images indexer integration internals inventory ivanti java javascript laravel layered-navigation layout lcp local-dev magento2 migration modules monitoring msi multistore network nextjs nodejs observability onboarding opensearch orders patch payments performance php plugins pricing profiling pwa quality rce react redis remotes resilience roundcube sap search security seo sessions shipping slo structured-data symfony sync tailwind team testing tomcat upgrade varnish wcag wordpress workflow xdebug zeroday