Hey everyone, heads up in case you haven't seen this yet. A major security hole in PHP (the code that runs WordPress and most websites) leaked publicly yesterday and the fix just came out this morning. They're calling it PHP2Shell. It basically lets someone run code on your web server without logging in, and people are already using it.
If you have a website this almost certainly affects you and it needs to be fixed today.
If you're not sure whether your site has been patched or where to even start, shoot me a message, I’d love to help.