PHP2Shell Leaves WooCommerce Stores on PHP 8.1 and Older Without an Official Fix
The PHP project fixed the PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 on October 21 only for PHP 8.2 through 8.5, leaving WooCommerce stores on PHP 8.1 or older dependent on host backports as CISA lists both flaws as exploited.