PHP 两个高危漏洞波及全球大量网站：WordPress、Wikipedia 等受影响
PHP: The three little letters wreaking havoc across the web
PHP 中被发现的两个漏洞影响约 70% 使用 PHP 的网站，Wikipedia、WordPress、Drupal 等平台受波及，DeviantArt 和 4Chan 在漏洞披露后一度下线。漏洞存在于近 20 年来几乎所有 PHP 版本中，部分已停止维护的旧站点只能选择永久关停。安全公司 Wiz 称这是“软件史上最严重的漏洞之一”，GPT‑5.6 Sol 被用于识别该关键 PHP 漏洞。
Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger.
By some accounts, up to 70 percent of websites use PHP in some capacity. It powers Wikipedia, WordPress, Drupal, and a host of other popular sites and platforms, including DeviantArt and 4Chan, which were temporarily shut down after the vulnerabilities were disclosed. Even governments weren’t immune.
But it’s not as simple as updating a few servers. The vulnerability exists in every version of PHP dating back roughly 20 years, many of which are no longer supported. That means some older sites and services that are no longer actively maintained are at risk, leaving them with little option but to permanently shut down.
Here’s all the latest developments in what security firm Wiz has called “among the most severe vulnerabilities discovered … in software history.”
- The disastrous PHP vulnerabilities were exploited days before the patch
- The Internet Archive was briefly forced offline because of PHP.
- Two old-school Japanese mobile games are shutting down over the PHP exploit.
- The PHP2Shell exploit hit Cloudflare hard.
- PHP: The three letters that shut down sites all over the internet today
- GPT‑5.6 Sol was used to identify critical PHP flaw.
- A critical PHP vulnerability may take websites down today
来源：The Verge：AI · theverge.com