10/22/2026
Quick heads-up if your business has a website.
Two critical security vulnerabilities were just patched in PHP, the software that powers a lot of websites, including those built with WordPress.
These vulnerabilities could allow someone to run malicious code on a vulnerable server without needing a username or password.
The good news is that updates are available, but they need to be installed.
If your website runs on WordPress or another PHP-based platform, I'd recommend checking with your website hosting provider to make sure they've applied the latest PHP security updates. Simply updating WordPress won't fix this particular issue. If your website is one we manage, it's already patched. Nothing you need to do.
Not sure who's responsible for maintaining your website? Feel free to reach out. We're happy to help you figure out what needs to be checked.