I’m not especially technical, but I have clients with WordPress websites. Can anyone perhaps put in a sentence or two what I need to suggest they do?

▲

schleck8 a day ago | parent | next [-]

Tell them to take anything with PHP offline, so that it isn't available from the public internet. That is how Netcup and Contabo are handling Wordpress hosting until they've upgraded all affected packages.

There are already functional exploit scripts on GitHub, you can target any Wordpress site right now.

▲

qwm a day ago | parent | prev | next [-]

Shut the sites down until you are able to update to the latest PHP patch for your version.

▲

smurf9852 a day ago | parent | prev | next [-]

You need to update the PHP version, which is usually done by the hosting provider.

	▲	butler14 a day ago \| parent [-]
		Just a note to say thank you to all of the above commenters, appreciated

▲

jacobalcock 14 hours ago | parent | prev [-]

[flagged]