Critical PHP Vulnerabilities Discovered Affecting Major Websites
Developing
Confidence
80%
Impact: 90%
Updated 6m agoConsensus Brief
Two critical vulnerabilities in the PHP programming language have been disclosed, affecting up to 70% of websites, including major platforms like Wikipedia and WordPress. The vulnerabilities, which have existed for roughly 20 years, could allow attackers to execute remote code on affected servers. Security patches have been released, but many older sites remain at risk due to lack of updates.
What Changed Since Last Update
6m ago
New corroborating source added: The Verge published an update on 2026-10-22 ("PHP: The three little letters wreaking havoc across the web").
Claim Ledger
4 claims tracked across sources
Role-Based Impact Analysis
Source Timeline
11 sources corroborating
T2
The Verge·2h ago
T2
The Verge·2h ago
T2
The Verge·2h ago
T2
The Verge·2h ago
T2
The Verge·2h ago
T2
The Verge·2h ago
T2
The Verge·2h ago
T2
The Verge·2h ago
The Verge·2h ago
T2
The Verge·2h ago
T2
The Verge·2h ago