Two critical PHP vulnerabilities endanger up to 70 percent of the web

Two vulnerabilities in the PHP programming language put a large portion of the internet at risk, with some accounts suggesting up to 70 percent of websites use PHP. This includes platforms like Wikipedia, WordPress, Drupal, DeviantArt, and 4Chan. The vulnerability affects nearly every version of PHP dating back roughly 20 years, many of which are unsupported, potentially forcing older, unmaintained sites to shut down. Security firm Wiz called these among the most severe vulnerabilities discovered in software history, and the PHP2Shell exploit was exploited days before a patch, leading to temporary outages for sites like The Internet Archive and the shutdown of some Japanese mobile games.