PHP Security Update Urged for 70% of Websites

A critical security update has been released for PHP, a programming language used by nearly 70% of websites, including WordPress, which powers over 40% of the internet. The PHP development team has addressed two vulnerabilities rated 9.2 out of 10 in severity, which could allow attackers to execute remote code.

The vulnerabilities, which enable unauthenticated remote code execution, have prompted the Cybersecurity and Infrastructure Security Agency (CISA) to urge immediate patching. While no exploitation has been observed, the risks remain significant if systems are not updated.

Experts warn that the code flaw could allow attackers to take over servers, emphasizing the urgency of applying the latest security fixes to protect internet infrastructure.