Your site may have a critical PHP vulnerability
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets attackers run code on servers running PHP older than 8.2.35, 8.3.36, 8.4.27 or 8.5.12, without logging in. Attacks have been seen since 17 October. Check whether your site is affected.