10/23/2026
šØ WEBSITE OWNERS: IMPORTANT SECURITY ALERT! šØ
Yesterday, October 21, the PHP development team released emergency updates to fix TWO critical security vulnerabilities that could allow hackers to take control of your website without ever logging in. š³
And hereās the scary partā¦
Even if your WordPress website, themes, and plugins are completely up to date, your website could STILL be vulnerable!
Thatās because the problem isnāt with WordPress. Itās with PHP, the programming language running behind the scenes on millions of websites.
Hackers could potentially exploit these vulnerabilities to run malicious code on your server, access sensitive information, or compromise your website.
ā ļø WHAT SHOULD YOU DO?
ā
Check your PHP version. The patched versions are 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
ā
Back up your website. Always have a current backup before making changes.
ā
Update PHP immediately. This can often be done through your website hosting dashboard. Make sure your website is compatible with the version youāre upgrading to.
ā
Check for suspicious activity. Look for unfamiliar admin accounts, unexpected file changes, or anything else that doesnāt look right.
š WHAT ABOUT GREAT SCOTT MARKETING CLIENTS?
Weāre already checking the websites we manage to make sure theyāre protected.
Websites hosted through our Great Scott Web Solutions hosting accounts, as well as our clientsā individual GoDaddy hosting accounts, have already been upgraded to patched PHP versions.
Weāre continuing to review our client websites to make sure everything is running smoothly.
This is also a great reminder that website maintenance isnāt just about updating WordPress plugins or changing a few pictures.
Thereās a lot happening behind the scenes that keeps your website running, secure, and working for your business.
And thatās why having someone looking after your website matters.
ā” Your website deserves more than a launch and good luck!