On October 21, two critical vulnerabilities were disclosed in PHP, the language on which most websites are built. If your website or online store is developed with Ebasnet, let’s get right to the point: we’ve already fixed it, and you don’t need to do anything.
What Happened with PHP
PHP is the language behind seven out of every ten websites whose technology is known (70.5%, according to W3Techs in August 2026). The two detected vulnerabilities score 9.2 out of 10 on the CVSS scale—classified as critical—and could allow an attacker to take control of a website that isn’t up to date. Organizations such as the U.S. CISA, CERT-EU, and INCIBE have urged users to update as soon as possible. The Catalan Cybersecurity Agency sums it up well: there’s no need to panic, but action must be taken quickly.
What We’ve Done at Ebasnet
We have updated PHP to the latest available version. The update affects all websites created with the Ebasnet CMS, which are now protected against these two vulnerabilities.
This isn’t an extraordinary measure—it’s part of what the platform includes: we handle security updates centrally so you can focus on your business.
What You Need to Do
If your website was created with Ebasnet, you don’t need to do anything. Just keep working as usual. We took immediate action as soon as the news broke.
If your website isn’t on Ebasnet, ask your hosting provider or whoever maintains it as soon as possible if they’ve updated PHP. WordPress has reminded users that versions prior to PHP 8.2 no longer receive security updates, so it’s a good idea to check which version you’re running as well. The same applies if your website or e-commerce platform is PrestaShop, Drupal, or Joomla, to name a few of the most well-known.
