Vulnerabilities in PHP seem to have been resolved with an update, but tech experts believe they see new risks.
Recent updates to PHP have addressed certain vulnerabilities, but experts express concerns about new risks. Swiss researcher Nicolas Krassas identified three additional vulnerabilities that could be exploited, although previous issues appear resolved. Discussions online reveal mixed opinions on the validity of these findings, with some suggesting they may not pose immediate threats. Additionally, there are warnings that attackers could have infiltrated systems before the update, leaving potential backdoors open. Notably, many older PHP systems remain unpatched, affecting about half of all PHP websites, and while manual solutions exist, they may not be foolproof. PHP emphasizes that updating is essential to combat vulnerabilities.