Critical vulnerabilities in a popular programming language. A large part of the internet is at risk.

PHP vulnerabilities rated 9.2 on the CVSS scale pose critical risks, allowing potential server takeover and data theft. Updates will be released today at 14:00 GMT. GoDaddy warns of ongoing attacks, urging immediate patch installation. Automatic WordPress updates won't cover these vulnerabilities, requiring manual intervention from site owners. CERT-EU advises preparing for updates or disabling affected sites, as vulnerabilities affect PHP versions from 5 onwards.