AI News Feed
Market watch
Cybersecurity

Two PHP flaws put wide swaths of web at risk, forcing site shutdowns

Two PHP flaws force DeviantArt, 4Chan and other sites offline; old unsupported installs risk permanent shutdown.

PHP powers Wikipedia, WordPress, Drupal and a host of other popular sites and platforms. DeviantArt and 4Chan were temporarily shut down after the vulnerabilities were disclosed. Governments were not immune, according to the report.

The problem is not limited to a few servers. The vulnerability exists in every version of PHP dating back roughly 20 years, and many of those versions are no longer supported. Older sites and services that are no longer actively maintained are at risk, leaving them with little option but to permanently shut down, The Verge reported.

Security firm Wiz called the flaws “among the most severe vulnerabilities discovered … in software history,” according to The Verge.

The fallout has extended beyond the sites first affected. Two old-school Japanese mobile games are shutting down over the PHP exploit, and the PHP2Shell exploit hit Cloudflare hard, The Verge reported.

The Verge also reported that GPT-5.6 Sol was used to identify the critical PHP flaw. It said a critical PHP vulnerability may take websites down today.

The scale of PHP’s use complicates remediation. Updating a few servers would not address installations across unsupported versions, and sites that have gone unmaintained may have no practical path to continue operating.