WEB DESK (Agencies) – Developers of the PHP programming language are preparing emergency security updates to address two critical vulnerabilities that could expose websites and servers to cyberattacks.
Both flaws have received a severity rating of 9.2 out of 10, prompting cybersecurity authorities to urge organisations to prepare for immediate patching once the fixes become available.
PHP powers widely used platforms, including WordPress, Drupal, Joomla and Magento, making the vulnerabilities a potential concern for website owners, hosting providers and businesses worldwide.
The European Union’s cybersecurity team has advised organisations unable to apply the updates to consider taking affected websites offline. Australia’s cybersecurity agency has also urged organisations to identify vulnerable systems and monitor for suspicious activity.
Cloudflare reported early signs of attempted attacks and said it was strengthening firewall protections as a temporary measure. Security experts stressed that these mitigations should not replace installing the official patches.
Website administrators have been advised to contact their hosting providers, check PHP versions and ensure security updates are applied promptly to reduce the risk of data theft and system compromise.
