Travel websites rush to fix critical PHP security flaws

Developers of the PHP programming language recently warned of critical security vulnerabilities that could allow attackers to control web servers without passwords, Skift reported.

The vulnerabilities, known as 'php2shell,' prompted cybersecurity agencies to urge organizations to patch their systems immediately or shut down their websites if fixes were not possible.

PHP powers about 70% of the world’s websites, including those of government agencies, travel brands, and destination marketing organizations, making the issue particularly urgent for the travel sector.

Various travel-related organizations responded promptly to the warnings to protect their websites from potential attacks, highlighting their reliance on outside vendors to maintain website security, according to Skift.