You may see some alarming posts about a “PHP vulnerability” floating around.
While the vulnerability is real, and a big enough deal that the link above goes to the NSA website, if Scribendi hosts your website action was taken to ensure your website was not affected.
A note from our hosting company:
“On October 21, 2026, the PHP development team published a security advisory for two critical vulnerabilities that can allow unauthenticated remote code execution on PHP installations serving web requests.
Our system administrators have already patched the following PHP versions: 5.6, 7.1, 7.2, 7.3, 7.4, 8.0, 8.1, 8.2, 8.3, 8.4, and 8.5 on all servers.
The security patch is active at the server level, so no action is required from you, and your existing websites and applications are not affected by this change.”
