GoKawiilTwo PHP vulnerabilities expose decades of websites to attack
Security researchers disclosed two vulnerabilities affecting the PHP programming language, which is used by an estimated 70 percent of websites including Wikipedia, WordPress and Drupal. The flaws exist in every version of PHP released over roughly the past 20 years, and sites like DeviantArt and 4Chan were temporarily taken offline after disclosure.
GoKawiil's interpretation of the reporting above, not reported fact.
Because PHP underpins such a large share of the web, the flaws' reach extends far beyond major platforms to countless smaller, unmaintained sites. Older, unsupported PHP versions may never receive patches, which could force some site operators to shut services down permanently rather than fix them.
- Two vulnerabilities affect nearly every PHP version released in the last 20 years
- Roughly 70 percent of websites, including Wikipedia and WordPress, rely on PHP
- Unmaintained older sites may have no patch available and could be forced offline
Source: theverge.com — Terrence O'Brien, 2026-10-22
Published there as: “PHP: The three little letters wreaking havoc across the web”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.