Security · Updated 22 Oct, 08:42 pm IST
Critical PHP vulnerabilities threaten large parts of the web
Why it matters for readers: Many popular websites use PHP, so these bugs can cause real disruptions and forced shutdowns if not fixed.
- The flaws exist in every PHP version going back about 20 years, leaving old, unsupported sites vulnerable.1
- By some estimates up to 70% of websites use PHP, including platforms like Wikipedia, WordPress, and Drupal.1
- Attackers attempted to exploit the PHP2Shell vulnerability on October 17th, days before the patch was applied, according to Amazon Threat Intelligence.1
- Some sites and services temporarily shut down—examples named include DeviantArt and 4Chan—because they were impacted after the disclosure.1
- Sites that are no longer actively maintained may have little option but to stay offline or permanently shut down if they cannot be updated.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started