PHP

PHP is a widely used open-source programming language for building websites and web applications, and it powers a large share of the web's server-side code, including many content management systems. For AI governance and compliance teams, PHP matters because AI features are often bolted onto existing PHP applications, which can expose customer data, prompts, or model outputs through web-facing code that was not built with AI risk in mind. Vulnerabilities in PHP frameworks and plugins are a recurring source of data breaches, so vendor patching and secure configuration belong in any review of AI tools deployed on these stacks.

1 item

ResearchGlobal2026-10-22

AI Cuts Complex PHP Exploits From Expert Work to Hours

Wiz Research, working with OpenAI and Calif, used frontier AI models to find and exploit critical memory-safety flaws in core PHP. The flaws are tracked as two CVEs with severity scores reaching 9.2. The vulnerabilities allow attackers to take over servers running WordPress, Drupal, and Joomla without any user interaction. The research shows AI has materially lowered the bar for exploiting complex, longstanding flaws that were previously considered difficult to weaponize.

Wiz Research OpenAI vulnerability management AI-assisted exploitation offensive AI patch management enterprise security PHP