PHP vulnerability: Which websites and services are affected?
PHP security flaws have prompted websites and gaming services to go offline. Here’s which disruptions are linked to the vulnerabilities.
Numerous websites and services have experienced disruptions due to security flaws found in PHP, a programming language widely used across the internet. These vulnerabilities could allow hackers to execute commands or gain access to sensitive data on vulnerable servers. The PHP update became available on October 21, but website operators and hosting providers must manually install it on their servers to secure affected systems.
High-profile platforms affected by the PHP security update include 4chan, which switched to read-only mode; Wikimedia, the organization behind Wikipedia, which took supporting tools offline; Fur Affinity, Pinboard, and Miraheze, which announced precautionary shutdowns; and gaming services such as Umamusume: Pretty Derby, Granblue Fantasy, and Princess Connect! Re:Dive, which all announced maintenance to address PHP vulnerabilities.
Government entities have also taken similar precautions, with services like the Port of Rotterdam, Dutch football association KNVB, Dutch government portal Overheid.nl, and Dutch National Cyber Security Centre being taken offline. Other disruptions have been reported without clear PHP connections, including the emergency maintenance of Pokémon games, GOG, and Duolingo, though the reasons behind these measures remain unclear.
Users have also encountered issues with DownDetector-reported tools like the Internet Archive and Asana, though these disruptions have not been directly linked to the PHP security update.
Written by urgent.news from Mashable's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
