Two serious PHP vulnerabilities put large numbers of websites at risk
What happened
On 22 October 2026, The Verge reported that two vulnerabilities had been found in PHP, putting large numbers of websites at risk. The report said that by some counts up to 70% of websites use PHP in some way, and that Wikipedia, WordPress, Drupal and platforms including DeviantArt and 4Chan were affected, with DeviantArt and 4Chan temporarily taken offline after the disclosure. The report did not disclose the technical details of the vulnerabilities, the specific basis for the impact figures or the progress of fixes.
Written by AI from the reports · updated 3 h ago
Timeline
Follow the reports to see the event from each side.
- The Verge · AIPHP: The three little letters wreaking havoc across the web
Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger. By some accounts, up to 70 percent of websites use PHP in some capacity.
Heat of this event
Current heat 5·Peak in the comparable range 5（Oct 23 23:00）·Change over 24 hours in the comparable range –
The trend compares only the same accounts observed without a break, so its range can be narrower than the current heat count. Move the pointer or tap the chart to see each hour; with a keyboard, use the left and right arrow keys.