Act Now to get a special offer
Logo

PHP Vulnerability Knocks Out Wikipedia, 4chan, and More

A critical PHP vulnerability knocked out Wikipedia, 4chan, and DeviantArt this week. Meta's earnings reveal the cost of its child safety settlement, while Airbnb bans chore-based house rules.

A cracked, glowing gear in a metal press drips dark liquid onto papers with symbols, next to rusty 'PHP' letters, a beaker, and a computer.

By Owen Mercer | October 22, 2026 |

A PHP Vulnerability Takes Down Major Sites

A PHP vulnerability disrupted huge parts of the internet on October 21. Wikipedia, 4chan, and DeviantArt all went down. Any site built on PHP, including most WordPress installs, faced risk from the flaw.

Researchers reportedly used AI tools to uncover two critical bugs in the language. PHP powers a massive share of the web’s backend infrastructure. That reach is exactly why this PHP vulnerability caused such widespread damage, as The Verge detailed in its coverage.

Who Should Worry About the PHP Vulnerability

If you run a WordPress site, you likely have exposure. Small business owners and bloggers should check for patches immediately.

Site admins should prioritize these steps:

  • Update PHP to the latest patched version right away
  • Check hosting provider notices for emergency fixes
  • Review server logs for signs of exploitation
  • Consider a web application firewall as a temporary shield

The confirmed impact includes major outages at well-known sites. The worst case involves attackers exploiting unpatched servers for data theft. Until patches roll out broadly, treat this PHP vulnerability as an active threat rather than a one-time event.

Meta’s Earnings Reveal the Cost of Compliance

Meta also made news this week with its third-quarter earnings report. The company says it would have earned $22.89 billion in operating income without a child safety settlement.

Instead, Meta paid $9.89 billion toward that settlement. In August, the company agreed to a $17.1 billion deal with US attorneys general over child safety claims.

Meanwhile, Meta announced a new class of non-voting shares. The funds will support AI infrastructure, acquisitions, and employee pay, with trading starting in 2027. This move signals just how expensive the AI race has become for even the largest tech firms.

Airbnb Rewrites Its House Rules

Airbnb updated its host policies this week too. Starting November 20th, hosts can no longer require guests to do chores like washing dishes or taking out trash.

The change targets rules that demand significant guest effort before checkout. Travelers have complained for years about hidden labor expectations at properties.

New York’s First Microdrama Festival Tests Viewer Appetite

Finally, New York hosted its first microdrama film festival, called Alza. Former Tribeca Festival executive Pete Torres founded the event.

Filmmakers showed vertical-format short content designed for phone screens. The real question is whether audiences want that format on horizontal TV displays too.

PHP vulnerability: Takeaways

This week mixed urgent security news with notable business shifts. The PHP vulnerability demands immediate action from site operators running affected software.

Meta’s earnings show regulatory costs now shape major tech balance sheets directly. Airbnb’s policy change and the Alza festival show smaller, consumer-facing shifts worth watching too.

For now, patch your PHP installations first. Everything else can wait until your sites are secure.

Home
Newsletter.
Join our newsletter for the latest in tech trends, deals and industry news.
WP-Engine Logo
WordPress Hosting Made Simple
Get fast, secure WordPress hosting with WP Engine. Join thousands of businesses that trust their performance and support.
Get More Info Here
Loading Icon