21/10/2026
Urgent Security Update for Website Owners
A serious security situation is currently unfolding worldwide involving two critical vulnerabilities in PHP, the technology behind millions of websites, including WordPress, WooCommerce, Joomla, Drupal and many custom-built business applications.
Already an AWE Media customer?
Many of our website builds and custom applications rely on PHP, and we're working closely with our upstream providers to ensure the relevant security updates are applied as quickly as possible.
Official patches are now being distributed, including security fixes for some older PHP versions.
We expect further progress over the next 24 hours. During this period, some customers may experience brief service interruptions while security updates are applied and services are restarted.
Advice for other website owners
If you manage your own website or aren't sure who's responsible for its security, here's what we recommend:
- Check that your hosting provider is applying the latest PHP security updates.
- Make sure your website, plugins and themes are regularly maintained.
- Avoid installing unofficial fixes or scripts circulating online.
- If your website uses an older PHP version, ask your hosting provider whether security backports are available.
Not sure whether your website is affected?
If your website hasn't been maintained recently, you're unsure who's looking after its security, or you simply need some friendly advice, feel free to get in touch.
