Content overview: “PHP Panic: Critical Bugs Put 70% of Websites at Risk, Patch Now”. Two critical vulnerabilities in PHP, the server-side language powering an estimated 70% of websites, allow unauthenticated attackers to execute code remotely and take full control of vulnerable servers. The flaws affect PHP versions 5.3 through 8.1, with exploits already observed in the wild within hours of disclosure. Security researchers warn that mass scanning for vulnerable systems is underway, and governments including Germany's BSI and the U.S. CISA have issued urgent advisories urging immediate patching.
Because PHP underpins major platforms like WordPress, Joomla, and Drupal, the attack surface is enormous, leaving millions of sites exposed until administrators apply the fixes. The bugs bypass authentication, meaning no user interaction is required for exploitation. While patches are available, the window between disclosure and exploit was dangerously short, and many organizations may not patch before attackers move. This listing links straight to the original page, where the content is available in full.