Outdated versions are widespread

According to security scanning firm Censys, 33.5 million PHP services worldwide run on versions affected by the flaws. PHP powers a large share of websites, so the figure directly concerns internet-facing sites and applications.

The Turkey picture

In Turkey, 92.9% of services that disclose their version fall into the risky category. The ratio shows how far local sites and institutions lag on updates.

Why it matters

In recent days, critical PHP flaws (remote code execution issues referred to as PHP2Shell) led to sites being temporarily taken offline worldwide, emergency patches being released and a national scan launched in Turkey. A service left on an old version stays exposed even after a patch ships.

What to do

Site and server administrators should check their PHP version, move to a supported release, enable automatic updates and follow the warnings issued by public authorities.