Serious vulnerabilities in PHP. The Ministry of Digitization responds
The Polish Ministry of Digitization announced a temporary shutdown of certain public institution websites due to vulnerabilities in PHP software. The CERT team warned that all PHP versions from 5.4 and above are affected, allowing attackers to execute remote commands. The only effective protection is to install an updated PHP version. Public institutions in several European countries also preemptively shut down websites after discovering critical security flaws in PHP. PHP is widely used for web development, powering around 70% of websites, including WordPress, which supports about 43% of all sites.