# Two decades-old PHP flaws put online services at risk

- URL: https://talkfuse.com/story/php-the-three-little-letters-wreaking-havoc-across-the-web/
- Published: 2026-10-22T15:12:27+00:00
- Updated: 2026-10-22T15:35:16+00:00
- Original publisher: The Verge
- Original article: https://www.theverge.com/tech/1016574/php2shell-security-vulnerability-websites-down
- Topics: Americas, Art, Business, Culture, Markets, World

## Key points

- PHP flaws put many websites at risk.
- The vulnerabilities affect versions dating back about 20 years.
- Some unsupported sites may have to shut down.

## Summary

Two vulnerabilities in PHP, a programming language used by up to 70 per cent of websites, exposed a vast range of online services to security risks. The flaws affected major platforms and sites, some of which temporarily shut down after they were disclosed.

The vulnerabilities reach back roughly 20 years and affect versions of PHP that are no longer supported, making them difficult to fix with routine updates. Older, unmaintained sites may have no practical way to address the risk and could be forced to close permanently.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.