A newly identified security vulnerability affecting PHP software used by millions of websites worldwide requires immediate attention.

PHP is the software that powers many websites, including those built on WordPress, Magento, Joomla and Drupal. Websites that have not been updated to address this vulnerability could be at risk of unauthorised access, potentially allowing hackers to compromise the website and the server it runs on.

The Scottish Council for Voluntary Organisations (SCVO) has published guidance on the steps website owners can take to protect themselves and strengthen security. The guidance includes advice for organisations with managed websites, smaller websites and self-hosted sites.


If you are unsure what action to take, contact your IT provider or website support provider as soon as possible.

End of page.

You may also like:

Back to all news