10/29/2026
🚨 We want to keep you in the loop on a website security issue that's been in the news.
A lot of websites are built with a tool called PHP. You never see it, but it works in the background to put each page together. WordPress uses it, and so do many other website platforms.
Last week, two serious weak spots were found in PHP. If a website hasn't been updated, a hacker could use them to break in and take over the site, no password needed. PHP runs roughly 70% of websites, including platforms like WordPress, Drupal and Magento.
🛠️ PHP released a security update on October 21. But as of October 26, the U.S. government's cybersecurity agency confirmed hackers are actively using these flaws.
⚠️ What to know:
If your website is on WordPress, it uses PHP.
Your hosting provider or web developer can confirm whether the update has been applied to your site.
However, sites running a very old version of PHP won't get a fix, so they'll need a bigger update.
Some website builders, like Webflow, don't use PHP at all, so they aren't affected.
Not sure what your site is built on? 📞 Call or send us a message!
🔗 mythreadlink.com
Sources: PHP Foundation, NSA, CISA, Webflow
