PSA: Critical Apache HTTP/2 Vulnerability: What WordPress Site Owners Should Know

Apache has released a fix for a critical vulnerability in the HTTP/2 module of Apache HTTP Server. The issue,CVE-2026-119618, can lead to remote code execution on affected servers. If your WordPress site is hosted on Apache, ask your host whether its Apache server accepts HTTP/2 and whether the f...