---
title: "Critical PHP Security Release - Angryecho"
description: "The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP."
canonical_url: "https://www.angryecho.com/c/wordpress/p/P2TBBkMIyf7C26nj96dgS"
meta:
  "og:description": "The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP."
  "og:image": "https://www.angryecho.com/_og/d/c_Post%2Ctitle_~5ZCQ5qe9572R%2Cdescription_~5ZCQ5qe95LiA5LiL77yM5bCx5LiK5ZCQ5qe9572R44CC%2CpostId_P2TBBkMIyf7C26nj96dgS%2Crevision_~MjAyNi0xMS0wMVQwMjo1NTo1Ny40MDAxNzda%2Cp_Ii9jL3dvcmRwcmVzcy9wL1AyVEJCa01JeWY3QzI2bmo5NmRnUyI%2Cs_YW9g8PHa8w9EJxsn.png"
  "og:image:height": "630"
  "og:image:type": image/png
  "og:image:width": "1200"
  "og:title": "Critical PHP Security Release"
---

> Index of every page on this site: [llms.txt](https://www.angryecho.com/llms.txt)

# **Critical PHP Security Release**

[The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP](https://www.php.net/archive/2026.php#2026-10-21-5).

Due to the critical severity of the issues, site owners are encouraged to immediately update their installations of PHP. Your web host may already be working to update PHP and put web application firewall (WAF) rules in place to mitigate the vulnerabilities, but you should still check for updates from your web host and, if necessary, update PHP as soon as possible.

Within WordPress, you can see which version of PHP your site runs under Tools > Site Health > Info > Server. Many web hosts provide this information in your web hosting administration panel too.

These vulnerabilities are *not* specific to WordPress and affect any server that hosts a PHP application. No WordPress update is required or planned for these issues.

Versions of PHP prior to 8.2 no longer receive security updates from the PHP project.

If your site runs a version prior to this and you manage your own web hosting, you should *consider taking your server offline* while you prepare to update to a newer version of PHP. This advice is being published by several national cyber security agencies. To quote [the UK National Cyber Security Centre](https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php):

> Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.

Further information on wordpress.org:

- [Get a faster, more secure website: update PHP today](https://wordpress.org/support/update-php/)
- [PHP Compatibility and WordPress Versions](https://make.wordpress.org/core/handbook/references/php-compatibility-and-wordpress-versions/)
- [FAQ My site was hacked](https://wordpress.org/documentation/article/faq-my-site-was-hacked/)

> 原文： [WordPress News｜Critical PHP Security Release](https://wordpress.org/news/2026/10/critical-php-security-release/)，2026-10-21

排序方式 :

### **成为第一条评论！**

Nobody's responded to this post yet. Add your thoughts and get the conversation going.

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://www.angryecho.com/c/wordpress/p/P2TBBkMIyf7C26nj96dgS#post","@type":"DiscussionForumPosting","commentCount":0,"dateModified":"2026-11-01T02:55:57.400Z","datePublished":"2026-10-21T04:00:00.000Z","description":"The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP.","headline":"Critical PHP Security Release","isPartOf":"https://www.angryecho.com/c/wordpress","mainEntityOfPage":"https://www.angryecho.com/c/wordpress/p/P2TBBkMIyf7C26nj96dgS","text":"The PHP project has announced a security release that fixes two critical security vulnerabilities discovered in PHP.\n\nDue to the critical severity of the issues, site owners are encouraged to immediately update their installations of PHP. Your web host may already be working to update PHP and put web application firewall (WAF) rules in place to mitigate the vulnerabilities, but you should still check for updates from your web host and, if necessary, update PHP as soon as possible.\n\nWithin WordPress, you can see which version of PHP your site runs under Tools > Site Health > Info > Server. Many web hosts provide this information in your web hosting administration panel too.\n\nThese vulnerabilities are not specific to WordPress and affect any server that hosts a PHP application. No WordPress update is required or planned for these issues.\n\nVersions of PHP prior to 8.2 no longer receive security updates from the PHP project.\n\nIf your site runs a version prior to this and you manage your own web hosting, you should consider taking your server offline while you prepare to update to a newer version of PHP. This advice is being published by several national cyber security agencies. To quote the UK National Cyber Security Centre:\n\n\n\nWhere immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.\n\nFurther information on wordpress.org:\n\n\n\n\n\nGet a faster, more secure website: update PHP today\n\n\n\nPHP Compatibility and WordPress Versions\n\n\n\nFAQ My site was hacked\n\n\n\n原文：WordPress News｜Critical PHP Security Release，2026-10-21","url":"https://www.angryecho.com/c/wordpress/p/P2TBBkMIyf7C26nj96dgS","author":{"@type":"Person","name":"mtbb","url":"https://www.angryecho.com/u/V2Xmtbb"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":0},{"@type":"InteractionCounter","interactionType":"https://schema.org/DislikeAction","userInteractionCount":0},{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":0},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":0}]}]}
```

## Sitemap

See the full [sitemap](https://www.angryecho.com/sitemap.md) for all pages.