SECURITY ADVISORY – OCTOBER 21, 2026

Summary:

On Wednesday, October 21, 2026 the PHP Foundation disclosed two critical security vulnerabilities that affect PHP – a widely used web technology that powers 70% of the world’s websites.

This announcement has received significant news and social media coverage.

Current Status:

Yesterday, our team immediately analyzed the threat to existing sites that we host.

- Most of the websites we host also use Cloudflare, which provides an additional layer of security.

- Regardless, the team spent Wednesday applying security patches to the vulnerable code and finished this last night. This work is now complete

Note: Websites and stores running on the Shopify platform use different web technology and are not affected.

Next Steps:

We will continue to monitor the situation and provide updates as needed