PHP vulnerabilities: is your business website secure?

On 21 October 2026, the PHP team published an advisory about two critical vulnerabilities that can allow remote code execution without authentication. For a business with a website or online store, this is a good time to check who looks after its website security and server updates.

What does PHP have to do with your website?

PHP is a technology behind many WordPress websites, PrestaShop and WooCommerce stores, and custom applications. Even if you never see it in your management panel, it forms part of the environment that processes requests to your website.

A page can load normally while relying on components that need updating. An attractive design or an HTTPS padlock does not tell you whether those components have received their security fixes.

A PHP update needs a compatibility review

Before changing the PHP version, it makes sense to check the website, modules and integrations for compatibility. For an online store, this review should cover payments, shipping, order emails and any connections to business management systems.

The technical team should also confirm which patches the provider’s package includes and review subsequent advisories. In addition, official security support for PHP 8.2 ends on 31 December 2026. If your website still uses it, plan a move to a compatible, supported version.

How can Cobertura Security help?

At GM Cloud Design, Cobertura Security, our website protection service, gives your business a team to turn to when a technical incident affects your website. It includes:

• 24/7 monitoring to detect incidents.
• Daily backups retained for three months.
• Malware removal included while the service remains active.
• Resolution of technical incidents affecting website functionality or display.

To establish what an older website needs, we first review its condition. This allows us to assess compatibility and define the work required before making changes.

Who is keeping an eye on your website security?

If you are unsure which version your website uses, who receives security alerts or how the site would be recovered after an incident, talk to us. Based in Palafrugell, we help businesses in Girona and beyond look after their digital presence over time.

Send us your website address and ask about Cobertura Security. You can also explore our server administration service.

Sources: official PHP advisory of 21 October 2026 and official support schedule.