Correction: Critical PHP Security Alert
Hey John Doe,
***Please disregard my previous email. A technical glitch caused the wrong content to be sent, so apologies. Below is the right one. ***
I don't send urgent emails often. This one is.
The PHP team has released emergency fixes for two critical security flaws. These flaws let attackers run their own code on your server and take control of your website, without needing to log in.
Making it worse, attackers already know how to use these flaws, and sites that don't update quickly will be easy targets.
The fixed versions are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
Here's a quick article that explains what you should do RIGHT NOW:
✅ Check your PHP version.
✅ Back up your site before you make any changes.
✅ Update to a patched version. You can usually switch PHP versions from your hosting dashboard.
✅Check for signs of a break-in. Look for admin users you don’t recognize and files that changed unexpectedly.
👉 Here's how to check if your WordPress site is at risk and protect it 👈
You don't need to be a developer to do this. Most of these steps take just a few clicks in your hosting dashboard, and your hosting provider can help with the technical work.
Stay safe,
Syed Balkhi
Founder of WPBeginner
Was this email helpful?
You received this email because you subscribed to the WPBeginner newsletter at wpbeginner.com to receive our valuable tips, resources, and insider information about blogging and WordPress :)
To ensure you always receive our emails, make sure to add our emails to allowlist.
Transparency Notice: WPBeginner content is reader supported, which means if you click on some of the links in this email, we may earn a small referral fee. Please know that we only recommend products that we use ourselves and / or believe will add value to our readers.
Cheers!
Here's to you and an amazing 2026!
© 2026 WPBeginner, LLC. All Rights Reserved.
400 Executive Center Drive Suite 208, West Palm Beach, FL 33401, US
