We are currently deploying patches for the Flywheel platform. Protective mitigations are still active at the CDN layer and at the host layer. Further updates will be provided as they are available.

WP Engine has finished the deployment of security patches for two critical PHP vulnerabilities on the Flywheel platform. The patch has been applied to your PHP version, and no action is needed from you. If you have any additional questions, please reach out to your support team.

New PHP Vulnerability (CVE-2026-115560), Flywheel Customers Already Protected

WP Engine Security has reviewed the new vulnerability affecting PHP noted in CVE-2026-115560 and existing site-level mitigations already protect customers against exploitation. No further action is needed at this time.

We are currently working with our impacted vendor partner who is investigating downtime and 522 errors for a subset of customers in the EU region. Updates will follow when available.

We are still working with our impacted vendor who is continuing to investigate cause of downtime for a subset of our customers in the EU region. For direct vendor updates please see: https://status.cloud.google.com/incidents/Xs2XTHzAVC9YnafnPyzj

Our vendor has identified the service degradation affecting a subset of our customer in the EU region as being caused by a power event. They are working to restore services and we will continue to update as more information becomes available.

Our vendor has successfully restored their services affected by recent power outage. We have seen a full recovery of the subset of sites within the EU region post-vendor service restoration.

We have identified the root issue and applied a fix.