# Critical PHP vulnerabilities could take websites offline today

https://mins.news/en/item/109386

- The Verge, 2026-10-21 11:49 UTC
- Tech
- Original: https://www.theverge.com/tech/1015257/php-vulnerability-patch-website-security-wordpress

> PHP is expected to release a patch today for two critical vulnerabilities rated 9.2 out of 10. Researchers say they affect PHP 5 and later and may put more than 1.3 million internet-connected hosts at risk. Agencies urge organizations unable to patch immediately to isolate exposed apps or take them offline. Cloudflare says early attacks are emerging and it has temporarily changed firewall rules.

## Related coverage

- [European government websites taken offline after AI helps find critical PHP flaws](https://mins.news/en/video/109918) — Al Jazeera English, 2026-10-21
- [Crypto security chiefs sound alarm over critical PHP flaws](https://mins.news/en/item/109850) — CryptoSlate, 2026-10-21
- [Cyber agency warns websites may go dark as PHP prepares critical fix](https://mins.news/en/item/109121) — Reuters, 2026-10-21