Why is everyone talking about PHP?

PHP is a foundational programming language that acts as the behind-the-scenes engine for roughly 70% of the web, powering popular platforms like WordPress, WooCommerce, and Drupal. Whenever a visitor loads a page, submits a contact form or buys a product, PHP works in the background on the web server to process that request and generate the content displayed on screen. Because it is so ubiquitous, any vulnerability found within PHP has the potential to impact businesses worldwide.

Last Week, cybersecurity teams identified a critical flaw dubbed PHP2Shell. The issue involves memory-handling weaknesses deep inside PHP’s core that could allow an unauthenticated attacker to remotely execute arbitrary code on a web server. What makes this disclosure particularly noteworthy is how it came to light: cutting-edge frontier AI models analysed the software and uncovered underlying flaws that had quietly existed in the codebase for over a decade without human detection. While this highlights an exciting leap forward in AI-driven defence, it also means attackers can quickly attempt to weaponise such discoveries, making swift remediation vital.

Finding out whether your digital assets are secure does not require a deep technical background. The most direct approach is to speak with your hosting provider, internal IT team, or web agency to verify which version of PHP your server is running.

The official PHP Foundation released critical patches across supported release branches (specifically updating to PHP 8.2.35, 8.3.36, 8.4.27, or 8.5.12 and above). If your site is hosted on a managed platform that automatically applies security updates, this may already have been resolved on your behalf; however, older, unsupported versions of PHP, such as 8.1 or earlier may not have been updated on your host.

At Cranberry, we believe robust security should give you peace of mind rather than operational headaches. Ensuring your website’s core infrastructure is patched, maintained, and shielded by active firewall protection is the simplest way to keep your brand and customer data safe. If you are uncertain about your current server configuration or want an expert eye to audit your web environment, the Cranberry team is on hand to help ensure your digital presence remains resilient.