PHP: The three little letters wreaking havoc across the web
Two severe vulnerabilities discovered in the PHP programming language affect every version from the past roughly 20 years, many of which are no longer supported. The flaws put approximately 70% of all websites at risk, including Wikipedia, WordPress, and Drupal. Some older, unmaintained sites have no choice but to shut down permanently due to the unsupported PHP versions they run on. The Internet Archive, 4Chan, and DeviantArt were temporarily forced offline, and a Cloudflare-targeted exploit called PHP2Shell has been active.
Key points
- Affects 70% of websites globally across 20 years of PHP versions
- Internet Archive, DeviantArt, and 4Chan temporarily taken offline
- Unsupported legacy PHP versions leave older sites vulnerable
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Verge did the reporting; read the original for the full story.
Read the full story at The Verge
