PHP releases emergency fixes as some of the world's biggest websites say they were targeted by hackers
PHP urges organizations to deploy the fixes immediately, as threat actors start abusing the php2shell bug
PHP released emergency fixes for two critical remote code execution flaws, urging webmasters to patch their installations immediately. The vulnerabilities, assigned a severity score of 9.2/10, were discovered by researchers and reported to be exploited before the patches became available. Due to the widespread use of PHP in web applications, millions of websites may be at risk, particularly those running unsupported legacy versions.
PHP has released patches for versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35, urging users to download the updated versions from their website.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
