PHP Security Advisory
On the 22nd of October a security advisory was announced for PHP that affected all PHP versions. All of WebShed's clients have been patched with no issues because of our continual maintenance approach.
Added 5 days ago
By WebShed
These are the versions that have been patched: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.
Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. PHP consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs.
WebShed Client Update
If you have your website hosted with WebShed your site and server have already been patched to a secure version of PHP. Our continual maintenance model means that you are always patched to keep your website and servers running on the latest technology allowing for any security patches to be applied easily once released. With the rise of AI this is now a must have not a nice to have.
More Information
You can read more about the PHP vulnerability on php.net.
More articles
What's coming in the latest WebShed plugin release
Rescued food has a new online home
New website for Zac's Plant Rentals
New Stripe Radar plans and pricing
14 Years of WebShed: Building Simple, Powerful Digital Solutions
