WoW Trivia is back online after security maintenance

Updated October 22, 2026: WoW Anniversary Trivia is back online. We have verified the security fixes in the server’s PHP runtime and checked the game’s backend services. You can return to WoW Trivia.

We temporarily disabled trivia on October 21 as a precaution following the disclosure of two critical PHP vulnerabilities. This notice explains the interruption.

Why was trivia taken offline?

According to the PHP development team, CVE-2026-109618 and CVE-2026-109619 can allow attackers to execute code on a server without authentication. The PHP project has released fixes and urges users to update immediately. Further details are available in the official PHP security advisory.

We disabled the trivia backend as a preventive measure so it would not process game requests while the update was pending. At our check on 21 October at 16:24 UTC, a fixed PHP version was not yet visible in our production environment.

How did the interruption affect players?

Some trivia pages could still load during the interruption, but gameplay and features requiring a server connection were unavailable. Players could see an error or a temporary service-unavailable message.

News articles and guides on wow-anniversary.fi remained available throughout maintenance. You can still browse the news archive or explore the guides on our homepage.

What did we check before reopening?

We verified the PHP security fixes by comparing the server’s executable checksums with the official patched packages. We then removed the maintenance block and checked the game’s connection to its backend and the other restored services.

CloudLinux also supplies fixes without changing PHP’s upstream version number, so we checked the actual package contents. Further details are available in the CloudLinux update notice.

We apologise for the interruption and thank you for your patience. Welcome back!