You may have seen news this week about "PHP2Shell", a pair of critical security flaws in PHP. PHP is the language that runs WordPress, Magento and a large share of websites worldwide. A few of you have been in touch about it, so I wanted to update everyone.
The short version: your website is protected and you don't need to do anything.
The flaws are in PHP itself, not in any particular website or host, so they affect sites everywhere. The PHP team gave advance warning on Tuesday, which meant we had our plan ready before the fix arrived. When the patched versions were released on Wednesday afternoon, we started applying them across the servers we manage straight away. That work is now complete.