Home / Technology / Critical PHP Flaw Threatens 40% of Internet
Critical PHP Flaw Threatens 40% of Internet
21 Oct
Summary
- Two critical PHP vulnerabilities have a severity rating of 9.2/10.
- Exploits affect PHP versions 5 onward, impacting millions of hosts.
- Websites unable to patch are advised to go offline.
Security patches are anticipated today at 10 AM ET to address two critical PHP vulnerabilities, carrying a severity rating of 9.2 out of 10. These exploits impact all PHP versions from 5 onward, with an estimated 1.3 million internet hosts potentially affected. The vulnerabilities could allow attackers to execute their own code on servers, leading to website alterations and data theft.
Given that WordPress powers over 40 percent of the internet and relies on PHP, every WordPress site is considered vulnerable. Cybersecurity agencies like the EU's CERT and the UK's NCSC are urging those unable to patch immediately to isolate systems or take them offline. Some entities, like GrapheneOS, have already temporarily taken user forums offline due to developing proof-of-concept exploits.
