Critical PHP Vulnerabilities (php2shell): What PrestaShop Merchants Need to Do
If you run a PrestaShop store, you’ve probably seen the php2shell headlines by now. On 21 October 2026 PHP pushed out fixes for two critical flaws, CVE-2026-109618 and CVE-2026-109619. The bugs are in PHP itself. Not in PrestaShop. Not in your modules. So there’s nothing to click in the back office: as PrestaShop’s own announcement …