Critical PHP security release — what Unyson+ users need to do
· 3 min read
The PHP Foundation is shipping an emergency security release today that fixes two critical remote code execution vulnerabilities in PHP itself. The UK's National Cyber Security Centre has issued an advisory urging organisations to update immediately.
There is nothing to update in Unyson+. The flaw is in the PHP interpreter your web host runs, not in the framework, the theme or any extension. No plugin update will fix it, and you do not need to wait for one from us.