Major PHP vulnerability

[dhutch]

Pretty big slice of news.

Mad that upto 70% or the web is PHP based.

https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o

[silentbrown]

dhutch said:

Pretty big slice of news.

Mad that upto 70% or the web is PHP based.

https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o

Was just going to post the same. I run a few wordpress sites, and we're waiting on the hosting provider to get patched versions of PHP installed.

Frustratingly, one site uses a plugin which is now unsupported and only works with PHP 6, which won't get patched. Fun and games...

[dhutch]

I run a forum and our tech admin took it off line at 3pm and having left work and got home, is currently working to patch it. Busmans holiday.

[ATG]

Ugh ... half the world uses WordPress, mostly via outsourced web development and hosting for small/tiny orgs. An awful lot of the sites won't be worth hacking in their own right as they're just serving static data, don't have any sensitive customer data, but lots of them will get caught in the crossfire as hosting firms will need to protect their own resources and attacks may well be scatter gunned.

[silentbrown]

ATG said:

Ugh ... half the world uses WordPress, mostly via outsourced web development and hosting for small/tiny orgs.

And, this on top of the UpdraftPlus hack last week which successfully took one of our sites offline.