Founder of @modern_fields, a custom fields plugin for Gutenberg. Also founder of Capitaine WP, teaching WordPress and FSE to web agencies
Grenoble (France)
Joined September 2008
- Tweets12.5K
- Following734
- Followers3.5K
- Likes6.9K
Le meilleur moyen pour savoir si vos sites #WordPress ont été touchés par les failles récentes !
Today we are introducing security audits inside WP Umbrella. It’s probably the most valuable thing for WordPress agencies that we ever released since we’ve created the company.
youtu.be/rY5hJb3BpLA?si=YaOy…
Mettez à jour sans attendre. Vraiment. #php2shell
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
PHP, Node, et maintenant Gitlab. Cette journée est interminable 😱
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
Déploiement en cours chez à peu près tous les hébergeurs. 💪 Sacré journée avec #php2shell. On devrait pouvoir dormir serein ce soir.
100 balles qu’ils se sont fait pirater. C’était la journée avec PHP, les certificats indiens et Nodejs. Ou alors c’est Lecornu qui fait des répétitions pour samedi 🤷♂️
🚨🇫🇷 ALERTE INFO | Orange n’a, pour l’heure, AUCUNE VISIBILITÉ sur un retour à la normale de ses services en panne depuis ce matin. (via @GrablyR)
Max Ⓦ CapitaineWP 👨🚀 retweeted
One-click mitigation for php2shell vulnerability:
If you have Cloudflare in front of your PHP website, please login to the dashboard and click this button to make sure you are protected.
dash.cloudflare.com/?to=/:ac…
This reduces your risk but doesn't fix the vulnerabilities in PHP. We recommend updating PHP to a patched version.
Max Ⓦ CapitaineWP 👨🚀 retweeted
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Annulez tous vos RDV à 16h, il va falloir mettre à jour vos serveurs #PHP en urgence !
2 failles critiques ont été découvertes et corrigées et toutes 2 notées 9.2/10.
Ce sera ensuite la course contre la montre.
Tout savoir sur la faille :
nitter.cf/Maximebj/status/211290…
Pour tout savoir sur la faille #PHP qui enflammé le web aujourd'hui : wiz.io/blog/php2shell-php-rc…
et
(mettez à jour vos versions de PHP!)
Pour tout savoir sur la faille #PHP qui enflammé le web aujourd'hui : wiz.io/blog/php2shell-php-rc…
et
(mettez à jour vos versions de PHP!)
You're about to loose a customer, @wpengine. And not just one. It's going to be a blood bath today and I've seen no communication from your side.
@olesovhcom quid chez OVH ? Vous êtes sur les starting blocks pour patcher en auto ou pas ?
@o2switch a confirmé qu'ils allaient patcher de leur côté. Quant à WPEngine, ils en ont a rien à faire du sujet.
O2switch recommande de désactiver uploadprogress dans PHP en attendant 16h. Depuis « sélectionner une version de php »
🥵
Watch the Grand Theft Auto VI Launch Trailer, featuring the debut of “Flower in a Hurricane" from original score composers Justice feat. Tame Impala, SZA, and King Gizzard & The Lizard Wizard.
Grand Theft Auto VI arrives November 19: rockstargames.com/VI/ps5
Vous avez bientôt plus aucune excuse pour quitter ACF 😋
Ambitieux chantier mais j'arrive au bout du système d'import des champs ACF !
Bientôt prêt à tester ! #WordPress
Working right now on the most important feature of @modern_fields : the import of fields groups from ACF 🤩.
So far so good. Works like a charm on WP CLI. Next: a proper UI for the WordPress admin and extensive tests with my sites.
Max Ⓦ CapitaineWP 👨🚀 retweeted
The WordPress MCP Adapter is now released: wordpress.org/plugins/mcp-ad… 🎉
This is the canonical MCP plugin for WordPress, carefully architected for backwards-compatibility with MCP versions. If you want MCP in your site or plugins, I highly recommend using this.
