Artur Kuznetsov

Last night, two PHP security issues were revealed, CVE-2026-109618 and CVE-2026-109619. Both allowed remote code execution with no authentication needed, and they were very serious, with a vulnerability score of 9.2. Due to the extent of the impact, we found ourselves doing emergency work on client sites late that night.

What astonished people most: updating WordPress and its plugins doesn't fix it. The problem is in the PHP language itself, so the PHP on the server is what must be upgraded.

Also note that if a website is running a PHP version that's no longer supported by the PHP development team, there will be no official patch.

Everyone keeps saying AI finally levels the field for small teams and solo founders. I m not so sure. The tools help, but there s only so much one or two people can do in a day, especially when you re also handling all the parts that aren t building. Bigger teams still out-post, out-ship, and out-distribute you. AI gave everyone the same boost, so I don t think the gap actually closed.

For other small teams: has AI really made it easier to keep up, or does it still feel the same?

Everyone says to test demand before you build. We didn t. We built the product first, like a lot of people do, and only afterward found a fast way to test the part we d skipped.

What we re testing now isn t really the idea - it s the positioning: Does someone landing on our page understand what the product is? Does the offer make sense? Does the pricing feel right?
We use a paid research panel (Prolific, though there are others like Wynter, PickFu and Lyssna) to put the page in front of people who match our audience. They read it and answer a short questionnaire: What do you think this does? Do you understand it? Does the price seem fair? You pick the audience, they review, you pay per response. A few hours to prepare, results back the same day.

It's been most useful for catching where people misread the offer - something our existing users can t really tell us, because they already understood it well enough to sign up. We ll use this approach for landing page changes from now on, and we ll run these tests before building the next thing rather than after.

How do you test whether people understand your product or your idea before you commit to it?