Deux failles critiques ont été découvertes dans PHP, utilisé par environ 70 % des sites web. Découvrez les mesures prises par UDITIS pour protéger vos sites WordPress et WebMaker.
A major security alert has been issued regarding PHP, the programming language used by a large proportion of websites worldwide. According to reports by RTS, two critical vulnerabilities have been identified, with a severity rating of 9.2 out of 10 (CVSS v4.0). These vulnerabilities have prompted many organisations and institutions to take immediate action to protect their systems.
Why is this discovery important?
PHP is one of the most widely used technologies for developing websites and online applications. It powers around 70 per cent of websites worldwide, which explains the scale of the response following this announcement.
The vulnerabilities discovered could allow an attacker to:
- to gain access to certain systems without prior authentication;
- to execute malicious code remotely;
- to modify content;
- or to access sensitive databases.
In light of these risks, several institutions and organisations have temporarily taken their services offline as a precautionary measure, pending the implementation of security patches.
Patches are already available
The PHP Foundation promptly released a patched version of the software incorporating the necessary fixes. Cybersecurity authorities, notably the Federal Office for Cybersecurity (OFCS), recommend that affected operators apply these updates without delay in order to minimise any risk of exploitation.
What impact will this have on your website?
The impact depends mainly on the technology used by your website and the version of PHP in use.
As with any critical vulnerability, enhanced monitoring and a rapid response are essential to ensure the continuity of services and the protection of data.
Initiatives undertaken by UDITIS
As soon as this security alert was published, our teams carried out the necessary checks on all the platforms concerned.
For WordPress websites
The WordPress sites we host and maintain were already running up-to-date versions of PHP. The security patches that have been released have been applied to ensure optimal protection against these vulnerabilities.
For WebMaker websites
Websites developed on the WebMaker platform do not use the PHP technology affected by this alert. They are therefore not affected by these vulnerabilities, and no specific corrective action has been required.
In summary
This discovery serves as a reminder of the importance of keeping digital infrastructure up to date at all times. Thanks to our security monitoring and maintenance procedures, appropriate measures were implemented immediately to safeguard our customers and their online services.
If you have any further questions regarding your website or your hosting, our team is here to help.