Subscribe to our newsletter for helpful updates, tips and insights delivered straight to your inbox. It's a simple way to stay connected and informed.
On Wednesday 21 October, two critical security vulnerabilities were disclosed in PHP, the programming language used by millions of websites, including WordPress and many other popular platforms.
The vulnerabilities, both rated 9.2 out of 10 for severity, could potentially allow attackers to execute malicious code on affected servers without needing to log in. Security updates were released yesterday, and hosting providers around the world have been working to apply them.
We're pleased to confirm that all our shared hosting servers have now been patched with the latest security updates.
There are a number of older websites on our shared servers that we don't actively maintain. As a precaution, we've moved all of these websites onto a patched version of PHP to protect them from the vulnerabilities.
Unfortunately, some older websites may not be compatible with these newer versions of PHP, and this could result in parts of those websites, or in some cases the entire website, not working correctly. This was a decision we felt was necessary to prioritise security, and we'll be working through any affected websites individually to resolve compatibility issues and contacting clients to discuss upgrade plans.
All our VPS (Virtual Private Server) hosting environments were also patched last night, 21 October.
We'll continue monitoring the situation closely as further information becomes available, and we'll apply any additional security measures where necessary.
We're aware that these announcements can be concerning, but please be assured that we're taking the situation seriously and have acted promptly to protect the websites and servers we manage.
If you're experiencing any issues with your website following these updates, please get in touch so we can investigate.
Please fill in the form below to book your FREE Website Review.