WordPress Responds to Critical PHP Vulnerability: Advises Website Operators to Update and Upgrade Immediately

WordPress has issued an official security advisory noting that the PHP project has released a security update. Given the severe impact of the vulnerability, site owners are advised to update PHP immediately and contact their hosting providers to verify patch deployment and the implementation of Web Application Firewall (WAF) mitigation rules. Users can check their website's currently running PHP version by navigating to the WordPress backend under Tools > Site Health > Info > Server. Versions prior to PHP 8.2 have ceased receiving official security updates. For sites still operating on older versions with self-managed servers, if an immediate remediation is not feasible, it is recommended to consider temporarily taking the server offline until the vulnerability is effectively mitigated. WordPress emphasizes that this vulnerability is not exclusive to its platform, but rather affects servers running PHP applications.