At the very end of October 2026, CISA (Cybersecurity and Infrastructure Security Agency, a component of the United States Department of Homeland Security) announced critical vulnerabilities in PHP. If you’re unfamiliar, beyond being a cool palindrome: PHP originally stood for «Personal Home Page». Now stands for the recursive backronym «PHP: Hypertext Preprocessor». Estimates indicate that about 70% of all current websites in 2026 depend on PHP. That’s why many professional webmasters (including myself) spent more hours than I would like to count in the past couple of weeks updating the PHP in many servers, which often required prior work in advance to be sure that each website could continue to operate properly with the newer PHP, especially when certain plugin and theme developers have been missing-in-action and haven’t updated their public information or responded to inquiries.

Fortunately, I am glad to announce that all websites directly hosted on TecnoTur have been updated to PHP version 8.5.12. In one particular case, an inherited theme was incapable of running on the latest PHP (and the theme developer offered no upgrade), so we found it necessary to convert it from a WordPress website to a static HTML website, in order to make it immune to PHP compatibility issues, rather than recreating it completely from scratch with a different theme. This topic—about converting existing WordPress websites into static ones—will be the topic of an upcoming article, where I will explain which type of sites can qualify for that, which can’t and why, depending upon the specific functions required. Fortunately, at TecnoTur, we know how to do the conversion, where it can be an option and where it can’t. Of course, we can host static HTML websites too.

Lee este artículo en buen castellano

Vulnerabilidad de PHP: ¿Ya actualizaste tu servidor web tras la advertencia?

(Re-)Subscribe for upcoming articles, reviews, radio shows, books and seminars/webinars

Stand by for upcoming articles, reviews, books and courses by subscribing to my bulletins.

In English:

• Email bulletins, bulletins.AllanTepper.com
• In Telegram, t.me/TecnoTurBulletins
• Twitter (bilingual), AllanLTepper

En castellano:

• Boletines por correo electrónico, boletines.AllanTepper.com
• En Telegram, t.me/boletinesdeAllan
• Twitter (bilingüe), AllanLTepper

Most of my current books are at books.AllanTepper.com, and also visit AllanTepper.com and radio.AllanTepper.com.

FTC disclosure

None of the listed individuals or companies mentioned above has paid for this article. Some of the manufacturers listed above have contracted Tépper and/or TecnoTur LLC to carry out consulting and/or translations/localizations/transcreations. So far, none of the manufacturers listed above is/are sponsors of the TecnoTur, BeyondPodcasting, CapicúaFM or TuSaludSecreta programs, although they are welcome to do so, and some are, may be (or may have been) sponsors of ProVideo Coalition magazine. Some links to third parties listed in this article and/or on this web page may indirectly benefit TecnoTur LLC via affiliate programs. Allan Tépper’s opinions are his own. Allan Tépper is not liable for misuse or misunderstanding of information he shares.