10/27/2026
Your website runs on software too. Who's updating it?
On October 21, the Canadian Centre for Cyber Security issued an alert about critical vulnerabilities in PHP, software that helps power many business websites, including those built with WordPress.
Security updates are available, but the alert raises a broader question for small businesses: 𝐖𝐡𝐨 𝐢𝐬 𝐫𝐞𝐬𝐩𝐨𝐧𝐬𝐢𝐛𝐥𝐞 𝐟𝐨𝐫 𝐤𝐞𝐞𝐩𝐢𝐧𝐠 𝐲𝐨𝐮𝐫 𝐰𝐞𝐛𝐬𝐢𝐭𝐞 𝐬𝐞𝐜𝐮𝐫𝐞?
A website isn't just its design and content. Behind it are the hosting server, software, and plugins that need regular maintenance and security updates.
When these are overlooked, vulnerabilities can put a business at risk of website disruption, unauthorized access, or compromised customer information.
For small business owners, there are three things worth checking:
Who manages your website's security updates? Your web developer, hosting provider, or IT team?
Is your website running affected software? Ask your provider to check the PHP version and confirm that applicable security updates and mitigations are in place.
Is ongoing security maintenance included in your agreement? Website hosting and website security aren't necessarily the same service.
The Cyber Centre also warns that PHP vulnerabilities may affect other software products, not just websites.
You don't need to manage these updates yourself. But you should know who does.
Not sure who's responsible for your website's security?
TeckPath can help you review your website's security and identify potential gaps in maintenance and protection.
Contact us at www.teckpath.com to get started.