The UK's National Cyber Security Centre (NCSC) has issued an urgent warning about two critical PHP vulnerabilities that could potentially allow hackers to take control of affected websites.
PHP powers millions of websites worldwide, including many built using WordPress.
The good news for our hosting customers? We've already taken action.
What we've done
At Highway Business Services, we've ensured the following protections are in place across our managed hosting infrastructure:
- Latest PHP security patches deployed across our hosting platform.
- Additional web application firewall (WAF) protection introduced to block potentially malicious requests.
- Vulnerable PHP functionality disabled as an additional precaution.
- Security fixes applied to older PHP versions where required.
- Continued security monitoring for emerging threats.
All necessary platform security updates have now been completed.
Is there anything you need to do?
If your website is hosted with Highway Business Services, there's nothing you need to do in relation to these vulnerabilities. We've taken care of the hosting infrastructure updates for you.
It's all part of the service. We work to keep your business secure so you can concentrate on running it.
Hosted somewhere else? Our guide, Critical PHP security issue: what the NCSC alert means for your website, explains the vulnerabilities and the questions to ask your current host.
Read the official NCSC warning: Critical security issue affecting PHP