22/10/2026
If your business has a website, this one’s worth two minutes 👇
A serious security flaw has been found in PHP, the software that runs behind a huge number of websites, including many built on WordPress.
A fix was released on 21 October, and attackers are already trying to exploit sites that haven’t been updated.
The fix is simple, but it needs to be applied to the server your website runs on. Updating your website’s plugins won’t do it.
If someone else looks after your website, send them one quick question today: “Has our PHP been updated?” 🤔
Microsoft 365, Teams and standard laptops don’t run on PHP, so your day-to-day work isn’t affected. And watch out for scam emails offering “urgent security fixes”. Forward anything suspicious to [email protected]
Our Service Delivery Director has put pen to paper on the topic below 👇 https://hubs.ly/Q04B_rkM0
Two critical flaws in PHP, used by up to 70% of websites, are being patched urgently. Here's what PHP2Shell means for your business and what to do next.