News Summary: Critical PHP Vulnerability Affects 70% of Web — What Authors with WordPress Sites Need to Do
Versions before PHP 8.2 are affected, and WordPress.org and WooCommerce both run on PHP
A critical PHP vulnerability disclosed last week has led to websites across the internet being taken down temporarily as a precaution while a patch is applied, ALLi Self-Publishing Advice reported. The outlet said the flaw affects versions of PHP prior to 8.2, and that the first step for site owners is to confirm what version their website is running.
ALLi reported that WordPress.org websites use PHP, as does WooCommerce, meaning many authors who run one or both platforms may be affected. The outlet said the most frequent advice it had seen was for people to contact their webhost to get confirmation of whether their site uses PHP and, if so, which version.
ALLi pointed readers to an announcement from WordPress about how it is handling the situation, and to further guidance at TrustOps. The outlet also directed its members to the SelfPubConnect forum for support from the ALLi community and team.
Here's the thing about "I'm not technical" — it stops being an excuse the moment your website goes dark. If you run a WordPress or WooCommerce site, you have a PHP version whether you've ever thought about it or not. This one's a five-minute phone call, not a project: ring your webhost, ask what version you're on, ask if you're affected.
From the Coral Wire edition of Wed, Oct 28 2026 · Coral Index 38/100 (Headwinds)