You may have seen in the news, "International governments and agencies have urged websites to address two critical cyber-security flaws in a programming language which powers much of the internet."
We are aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. This affects over 70% of the Internet.
All customers should update ASAP to at least patched PHP version.
Simply updating might break sites, in which case your web developers will have to help update your sites.
Most of our systems use Plesk and they have provided information regarding versions :-
https://support.plesk.com/hc/en-us/articles/44397729587351-Vulnerability-CVE-2026-109618-and-CVE-2026-109619-PHP2Shell-Remote-code-execution-in-PHP-shipped-with-Plesk
Total Web Solutions Card Payment Gateway
Our gateway does not use PHP so so is not affected.
