PHP Vulnerabilities – Information about your site’s safety
We are aware of the critical security vulnerability affecting PHP.
PHP is a very widely used computer language for web development and is used in all sites that use WordPress. The vulnerability is in the PHP language itself, not in WordPress.
The servers hosting SiteWorks sites have all received the required security patches. However please note that these patches were applied without changing the PHP version number. This means that your sites may still show the PHP version number as 8.3.35 instead of 8.3.36, even though the fix is in place.
All hosted SiteWorks sites are also protected by the Immunify360 web application firewall, which also contains rules that would prevent the PHP vulnerability from being exploited.
The security of u3a websites hosted by SiteWorks is our top priority and we’re confident that these steps continue to protect them.
References
PHP statement of vulnerabilities – https://www.php.net/
Imunify360 – https://imunify360.com/imunify360/
Wordfence analysis – https://www.wordfence.com/blog/2026/10/psa-upcoming-critical-php-security-release/