PHP vulnerabilities in the news

22nd October 2026

PHP cyber vulnerability

The news is full of stories about PHP and a major cyber security scramble following vulnerabilities disovered by cyber firms Wiz and Calif who said the flaws – dubbed "php2shell" - were inherent in the language itself, with versions of PHP released over the last decade affected.

The PHP Foundation, who maintain the server technology, were quick to issue updates which close the recently discovered loopholes.

Weblaunch is one of many millions of web systems built using PHP.

We'd like to take this opportunity to reassure our clients that our servers have been patched and an examination of access logs shows no attempt to exploit these vulnerabilities.

This is due, in part, to our continuous upgrade policy. We have been silently working away in the background to keep Weblaunch up-to-date, so when this security vulnerability came to light it was a quick and simple process to ensure our customers' websites were protected.