We use cookies to give you a better experience on our website. Learn more about how we use cookies and how you can select your preferences.
Critical vulnerabilities found in PHP
Patches are now available to fix the issues.
Two critical vulnerabilities have been found in PHP, a technology used in many websites and web applications. This includes websites built with WordPress, Drupal and Joomla.
Left unpatched, the vulnerabilities could let attackers run their own commands on your server.
Patches are now available to fix these issues.
If you have a website or other application that uses PHP:
- check that your web developer, website host or IT provider has applied the patches. If you can’t apply the patches immediately, consider taking impacted websites or systems offline until you can
- monitor your website and web applications for any suspicious behaviour
- keep an eye on the Australian Cyber Security Centre website for updates and further alerts.
If you’ve been impacted or need more advice on this issue, contact the Australian Cyber Security Centre on 1300 CYBER1 (1300 292 371).
Read next
-
Find out more about cyber threats to your business.
Cyber security and your business