Our education organization uses Wickeditor. Is this product vulnerable to https://www.cisa.gov/news-events/alerts/2026/10/21/critical-vulnerabilities-php-require-immediate-patching
1 Like
Um, I’m not that smart so is this bad? And could you please summarize it?
Hi @Greg_Flanagan, Wick Editor (and any other projects that base themselves on it) is strictly a React 16 and JavaScript app.
Unless you’re using Wick for important student tools (dashboards, mailing, etc.), you should be fine. Wick is not indented to be used for something important, since it doesn’t sandbox your code, leaving YOU to filter out any potential vulnerabilities in YOUR code.
It’s that bug everyone was talking about last week. PHP2Shell is a RCE (Remote Code Execution) exploit which allows affected servers to run any PHP code you want in there.
Even though the most important services have already fixed everything, MILLIONS of sites already online are still exploitable.