Post

L Break Into Program
@breakintoprogram.co.uk

On the bright side, I suppose this'll mean hackers will be concentrating on vulnerabilities in PHP rather than WordPress.

L Break Into Program@breakintoprogram.co.uk

In light of this, I'll be taking my websites down until my provider has patched PHP. Hold please caller.

ncsc.gov.ukCritical security issue affecting PHPUpdated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619).

0 reposts18 likes

Computing in a Nutshell
@advanced-ict.info

I was surprised to discover that an estimated 40% of all websites use WordPress. My version of PHP has been patched, but it's not the latest. It doesn't sound like an upgrade will break anything, but it's difficult to tell with these things, isn't it? PHP error reporting isn't the best, either.

gazsp
@gazsp.bsky.social

So twice the fun? :D We farm out 99% of our WordPress stuff as we just can't deal with the constant security / upgrades battle.

L Break Into Program
@breakintoprogram.co.uk

It's a royal pain if you want to maintain a small blog. The whole idea behind WordPress is that it makes publishing on the Internet easier. It may well do that, but there's a fair amount of tech knowledge required to do that safely. And even then, one is reliant on too many third parties.

gazsp
@gazsp.bsky.social

There's no brightside. I spent 10 hours patching and updating servers yesterday. WordPress is doubly insecure as the code is awful + it runs on PHP...