Posted on 21/10/2026 by Katie Jenkins

Critical PHP security vulnerabilities: what it means for your website

The PHP security team has announced an emergency security release to fix two critical vulnerabilities in PHP, the programming language that powers WordPress and a large share of websites worldwide, including all of the websites we host.

Both vulnerabilities have been rated 9.2 on the CVSS v4.0 severity scale. Flaws of this kind can allow attackers to run their own code on affected servers. This is a global issue affecting websites across the internet, and it is being treated as severe by the wider industry.

What’s happening?

The PHP team is due to release the fix on Wednesday 21 October 2026 at 14:00 UTC (3pm UK time). Until then, there is no confirmed safe fix, and there have already been reports of attacks taking place.

What are we doing?

If we host your website, we’re doing everything within our control to protect it, along with your data and your customers.

Our hosting team is closely monitoring all of the websites on our servers and remaining vigilant for any signs of suspicious activity while we wait for the fix to be released.

We’ll share a further update here once the patch has been released and applied.

However, given the scale and severity of this issue, we can’t rule out risk entirely, which is why we’re also asking for your help in staying alert.

What should you look out for?

Please keep a close eye on your website for anything unusual, such as:

  • Content or design changes you didn’t make, including edits to pages or blog posts
  • Visitors being redirected to unfamiliar websites
  • Unexpected login alerts or password reset emails
  • Unusual enquiries from customers, or reports of suspicious emails
  • Changes to contact forms, checkout pages or payment details
  • Error messages or unexplained slowdowns
  • Admin users or plugins you don’t recognise

If anything looks suspicious at all, please email us or call 01604 806020 straight away, and send a screenshot if you can.

Do you need to take any action?

If we host your website, no. There’s no need for you to make any technical changes, as we’re handling the security updates for you. We’ll be in touch if any further action is needed or if your website is likely to be affected by any downtime.

If your website is hosted elsewhere, we’d strongly urge you to contact your hosting provider to confirm they’re planning to apply the update promptly.

If you have any questions in the meantime or concerns about your website, please get in touch with the team, either email your account manager or feel free to ring us on 01604 806020.

Source: PHP: News Archive – 2026

Katie is our exceptional Lead Designer who possesses an innate passion for designing websites and creating captivating themes and aesthetics. Her unparalleled dedication to producing innovative solutions that address client needs and reshape user perceptions is truly commendable. Katie finds immense gratification in crafting tangible designs that leave a lasting impact. Equipped with a comprehensive university degree in Computer Management and Web-Based Studies, Katie brings a wealth of knowledge to the forefront of her role at Loop. Her educational background empowers her to leverage cutting-edge technologies and industry best practices to deliver exceptional design solutions. Katie's expertise shines through her ability to revamp websites, logos, and brands, allowing clients to showcase their business in a fresh and illuminating manner. Her keen eye for detail and creative flair breathe new life into digital assets, providing a platform for clients to shine in their respective industries. In addition to her professional pursuits, Katie's passion for baking serves as a testament to her creative nature and attention to detail. This dedication extends beyond her design work and fuels her ability to approach each project with meticulousness and care. Her ability to understand clients' unique requirements and translate them into captivating designs has garnered her praise and established her as a trusted design partner. Katie's professionalism and unwavering enthusiasm make her an invaluable asset to our team. Her expertise in website design, coupled with her dedication to delivering tangible results, sets her apart as a Lead Designer. Clients can expect nothing short of exceptional designs that elevate their brand, captivate their audience, and drive success.

Looking for your next opportunity?

Digital marketing careers

We’re always on the lookout for talented individuals to join our ever growing team. If you think you’d be a great match for Loop Digital, we’d love to hear from you.

Loop Digital Team Picture

Join 300+ business owners getting weekly growth strategies - subscribe now.

"*" indicates required fields

© 2026 Loop Digital Marketing Ltd - All Rights Reserved - Company number: 09284217