23/10/2026
Two serious security flaws in PHP were fixed this week.
PHP is the software behind around 70% of the world's websites, including every WordPress site. The ACSC issued a critical alert, and several government websites went offline while fixes went in.
Here's what business owners need to know:
→ Updating WordPress won't fix this. The fix happens on the server your website runs on.
→ If your site is hosted with ShadowSafe, it's already protected.
→ If it's hosted elsewhere, ask your web developer to confirm PHP has been updated.
If your website is hosted by us, you're already patched. There's nothing you need to do.
PHP has been a target for years. What's different this time is the speed. AI helped find these flaws, and attack attempts started within a day of the details leaking. Cyber security has never been more important than ever.
PHP2SHELL: Two critical PHP flaws were fixed this week. Here's what Australian businesses on WordPress need to check, and who's responsible for the fix.
