AI-Discovered PHP Flaws Force Emergency Patching Across the Web

· Tech

The creators of PHP, the open-source programming language that underpins much of the web including most WordPress sites, urged maintainers worldwide on Wednesday to install an update after researchers using AI found critical vulnerabilities that could let attackers compromise sites. The two bugs caused major problems for sites including 4chan, DeviantArt and Wikipedia. The disclosure is the latest example of AI-assisted security research surfacing flaws at a speed and scale that strains the patch pipeline.

Why it matters：The vast installed base of PHP and WordPress means a single AI-found flaw can disrupt a large share of the public web, pushing open-source maintainers and enterprises toward faster automated patching.

Key points

  • Two critical vulnerabilities were found in PHP using AI tools, per the reports.
  • Affected sites included 4chan, DeviantArt and Wikipedia.
  • PHP underpins any site built on WordPress, widening the exposure.

Sources (original reporting)

More stories from this day