October 28, 2026

Emergency WordPress Security Updates

Posted at 1:02 pm
Resolved

WP Engine will be performing WordPress Security Updates today, Wednesday, October 28th, 2026. All sites that are running WordPress v4.7 or later and not on the most secure version of their current branch will be updated (e.g., 7.1.3 -> 7.1.4).

There are no deferrals in this update process as this is a security update.

There is no need to wait for us to upgrade your WordPress, and it is recommended that you upgrade your WordPress version to the most secure version now. For more information on our security upgrade process, refer to our article here

October 21, 2026

PHP Security Update

Posted at 9:31 am
Resolved

As widely reported, two critical vulnerabilities were recently identified in PHP, the core programming language powering WordPress. Our security teams have been actively monitoring the situation and implementing several mitigating actions.

As of 8:40 AM CDT (13:40 UTC) today, PHP has begun to release patches and other mitigating steps to resolve the vulnerabilities. Our team is working to roll out these updates across all customer platforms as soon as possible. In addition, we have already deployed protective mitigations at the CDN layer via Cloudflare and Fastly.

We will share further updates as deployment progresses.

Updates

Updated on 2026-10-21 12:30 pm

We are currently deploying patches for the Flywheel platform. Protective mitigations are still active at the CDN layer and at the host layer. Further updates will be provided as they are available.

Updated on 2026-10-21 02:00 pm

WP Engine has finished the deployment of security patches for two critical PHP vulnerabilities on the Flywheel platform. The patch has been applied to your PHP version, and no action is needed from you. If you have any additional questions, please reach out to your support team.

Updated on 2026-10-23 10:00 am

New PHP Vulnerability (CVE-2026-115560), Flywheel Customers Already Protected

WP Engine Security has reviewed the new vulnerability affecting PHP noted in CVE-2026-115560 and existing site-level mitigations already protect customers against exploitation. No further action is needed at this time.

October 20, 2026

GCP europe-west2 Region Experiencing Degraded Availability

Posted at 2:14 am
Resolved

We are investigating an issue affecting some installs hosted in the GCP europe-west2 region. Affected sites may experience loading issues or gateway timeouts. Our internal teams are actively investigating the issue and working to determine the cause and impact. We will provide updates as more information becomes available.

Updates

Updated on 2026-10-20 09:41 am

We are currently working with our impacted vendor partner who is investigating downtime and 522 errors for a subset of customers in the EU region. Updates will follow when available.

Updated on 2026-10-20 11:34 am

We are still working with our impacted vendor who is continuing to investigate cause of downtime for a subset of our customers in the EU region. For direct vendor updates please see: https://status.cloud.google.com/incidents/Xs2XTHzAVC9YnafnPyzj

Updated on 2026-10-20 12:23 am

Our vendor has identified the service degradation affecting a subset of our customer in the EU region as being caused by a power event. They are working to restore services and we will continue to update as more information becomes available.

Updated on 2026-10-20 01:26 pm

Our vendor has successfully restored their services affected by recent power outage. We have seen a full recovery of the subset of sites within the EU region post-vendor service restoration.

Next Page »
[email protected] •
@flywheelstatus •
GetFlywheel.com