Widespread PHP Flaw May Cause Many Site Outages Today
PHP released emergency security updates to fix two critical vulnerabilities in the programming language powering Drupal, Magento, Joomla, WordPress, and other major systems. The flaws enable remote code execution, denial of service, and data exposure. Exploitation is already occurring in the wild; European government websites have gone offline. Cloudflare implemented web application firewall protections, and OpenAI—involved in vulnerability research—called it one of the most impactful security issues in recent memory.
Key points
- Two critical PHP vulnerabilities allow full server compromise
- Affects ~70% of websites using WordPress, Drupal, Joomla, Magento
- Active exploitation and widespread outages already underway
- Emergency patches released; Cloudflare deployed mitigations
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. Krebs on Security did the reporting; read the original for the full story.
Read the full story at Krebs on Security
