Outdated versions are widespread
According to security scanning firm Censys, 33.5 million PHP services worldwide run on versions affected by the flaws. PHP powers a large share of websites, so the figure directly concerns internet-facing sites and applications.
The Turkey picture
In Turkey, 92.9% of services that disclose their version fall into the risky category. The ratio shows how far local sites and institutions lag on updates.
Why it matters
In recent days, critical PHP flaws (remote code execution issues referred to as PHP2Shell) led to sites being temporarily taken offline worldwide, emergency patches being released and a national scan launched in Turkey. A service left on an old version stays exposed even after a patch ships.
What to do
Site and server administrators should check their PHP version, move to a supported release, enable automatic updates and follow the warnings issued by public authorities.



