Two critical vulnerabilities in PHP threaten millions of websites, and updating WordPress does not help. Who is affected, why a patch alone is not enough and how I check your website.