CONNECT WITH US
Tech

Tech

Critical PHP Core Security Flaws Affect Websites, Including WordPress via @sejournal, @vahandev

Search Engine Journal logo

Published on

Add as a preferred source on Google
Critical PHP Core Security Flaws Affect Websites, Including WordPress via @sejournal, @vahandev

PHP's emergency security update, scheduled for today, October 21, at 14:00 UTC, is now available. Ask your host to patch PHP and upgrade unsupported versions.

The PHP security team has released emergency fixes today, October 21, 2026, for two critical flaws that can let attackers run code on website servers without logging in.

The fixed versions are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. PHP says updating is the only safe choice because no workaround fully addresses the vulnerabilities.

PHP says all installations serving website requests are at risk. Apache servers using mod_php, which runs PHP directly inside Apache, face the highest risk. A demonstrated attack can run before the website’s own code starts.

PHP runs WordPress on your web server. Updating WordPress or its plugins will not update PHP. Ask your host to install the fix. If your hosting account lets you switch PHP versions through cPanel, confirm that the version you select includes the patch.

PHP 8.1 and older remain on the end-of-life list and no longer receive regular official updates.

For this emergency, PHP has provided limited source-code fixes for PHP 7.4, 8.0, and 8.1 for teams that build PHP themselves. Hosting providers and long-term support vendors may also supply their own updates. These fixes do not restore ongoing support. Ask your host to confirm protection while arranging an upgrade to a supported version.

International Cyber Digest reported that Dutch parliament and cyber agency websites, Finnish government web services, and university sites went offline ahead of the release.


Source link
Related Topics:Tech

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.