PHP vulnerability: Websites hosted with world4you are protected
Two critical vulnerabilities in the PHP core are putting websites worldwide at risk. world4you has already applied the official security update on all platforms the company operates. Customers of world4you do not need to take any action themselves.
Two critical security vulnerabilities in the PHP core became public yesterday, allowing attackers to execute their own code on a website and thereby access customer data. PHP installations are affected regardless of the hosting provider. The PHP project released security updates closing these vulnerabilities on October 21, 2026.
For world4you customers, no action is generally required. Only those running PHP on self-managed systems (for example VPS or bare metal) should install the update themselves. Details are available at php.net.
Beware of phishing: Fraudsters are increasingly exploiting vulnerabilities like these by sending fake emails to obtain login credentials. It is advisable not to click any links in emails referring to the PHP vulnerability and not to enter any login details.
