PHP2Shell and WordPress: Why `php -v` Is the Wrong Check
A correctly patched Ubuntu server reports PHP 8.3.6 against an upstream floor of 8.3.36. Here is how to actually verify you are patched against CVE-2026-109618 and CVE-2026-109619 — and why your WordPress security plugin stays green either way.