In a security update, PHP said the two critical vulnerabilities were rated 9.2 on the CVSS v4.0 severity scale and urged users to 'upgrade as soon as the release is available'.(AFP pic)BENGALURU: The developers of the widely used PHP programming language said on Wednesday they would release patches for two critical vulnerabilities, as EU cybersecurity officials warned organisations unable to apply the fixes should take affected websites offline.

PHP is used across large parts of the internet, and speculation has circulated over the past day that websites running the software could be exposed to serious cyber intrusions.

"PHP is everywhere. It quietly powers WordPress, Drupal, Joomla, and Magento sites, shared hosting platforms, control panels, and an awful lot of software that doesn't even advertise that it runs PHP under the hood," cybersecurity company Huntress said in a blog post.