{"id":20528,"date":"2026-10-29T21:02:40","date_gmt":"2026-10-29T20:02:40","guid":{"rendered":"https:\/\/trilogi.com\/blog\/?p=20528"},"modified":"2026-10-29T21:02:40","modified_gmt":"2026-10-29T20:02:40","slug":"php2shell-one-week-on-the-risk-to-your-business","status":"publish","type":"post","link":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/","title":{"rendered":"PHP2Shell, one week on: the risk to your business and three decisions to make now"},"content":{"rendered":"

A week after the PHP2Shell patches, the question for a leadership team is no longer technical: it is how much business is exposed while the store’s server remains unpatched.<\/strong><\/p>\n

What happened<\/h2>\n

On 21 October, the PHP project released emergency patches for two critical vulnerabilities known as PHP2Shell. They affect the PHP engine itself and let an attacker run code on the server without a username or password. They carry a severity score of 9.2 out of 10 and affect almost every PHP version since 5.4. The fixed versions are 8.5.12, 8.4.27, 8.3.36 and 8.2.35.<\/p>\n

Since then, attack attempts have been constant, and on 26 October the US cybersecurity agency added them to its list of flaws that are already being exploited. Even so, more than 32 million PHP services worldwide are still running a vulnerable version.<\/p>\n

Why it matters to your business<\/h2>\n

PHP powers WooCommerce, PrestaShop and Magento, the platforms behind many online stores and B2B portals of mid-sized companies. A flaw like this does not affect one feature: it gives access to the whole server. And that server holds the orders, the customer data, the ERP integrations and, often, the credentials for payment gateways and marketplaces.<\/p>\n

In our experience, the real cost of an incident like this is almost never the technical one. It is the hours or days without selling, the team stuck trying to understand what happened, having to notify customers whose data may have been compromised, and the trust you lose. For a store turning over \u20ac10,000 a day, three days of downtime mean \u20ac30,000 in sales that do not come back, before counting anything else.<\/p>\n

One important nuance: keeping WordPress, WooCommerce or PrestaShop up to date is not enough. The patch lives in the server’s PHP version, which often depends on the hosting provider or on nobody in particular. And versions older than 8.2 no longer receive patches: if your store runs on one of them, the fix is not an update but a migration project.<\/p>\n

The three decisions we would make this week<\/h2>\n

1. Know, don’t assume.<\/strong> Ask your technical lead or provider today for a written answer: which PHP version each environment runs (the store, staging, the back office and the integrations) and when the patch was applied.<\/p>\n

2. Decide who owns the platform.<\/strong> If nobody can answer the first question within a day, the risk is not PHP2Shell: it is that the platform your online revenue depends on has no clear owner. It is a good moment to decide whether that maintenance should stay in-house or with a team offering 24×7 support.<\/p>\n

3. Put a date on technical debt.<\/strong> If your store runs on an unsupported PHP version, plan the upgrade or migration now, with a budget and a timeline, instead of waiting for the next emergency alert.<\/p>\n

What we would do at TRILOGI<\/h2>\n

On the platforms we manage, PHP updates are part of maintenance and are applied with prior testing so integrations do not break. When a company asks for help in a situation like this, we start with a quick review of versions, access and logs from the last few days, and then propose the plan: immediate patch, migration if needed, and a maintenance model that avoids depending on emergencies again. If you want to see how we work, here is our 24\u00d77 managed eCommerce platform<\/a>.<\/p>\n

Every Tuesday, the 5 stories that matter: subscribe to the newsletter<\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

A week after the patches, millions of PHP servers remain exposed. What it means for an online store and which decisions leadership should make this week.<\/p>\n","protected":false},"author":2,"featured_media":20519,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2505],"tags":[3106],"class_list":["post-20528","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trilogi-news","tag-radar"],"yoast_head":"\nPHP2Shell, one week on: the risk to your business and three decisions to make now | Blog Trilogi \u2013 The Digital Agency<\/title>\n<meta name=\"description\" content=\"A week after the PHP2Shell patches, millions of servers remain exposed. What it means for your online store and the three decisions to make right now.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PHP2Shell, one week on: the risk to your business and three decisions to make now | Blog Trilogi \u2013 The Digital Agency\" \/>\n<meta property=\"og:description\" content=\"A week after the PHP2Shell patches, millions of servers remain exposed. What it means for your online store and the three decisions to make right now.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog Trilogi \u2013 The Digital Agency\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Trilogi.eCommerce\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-29T20:02:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/trilogi.com\/blog\/wp-content\/uploads\/sites\/2\/radar-php-1200x630-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Trilogi \u2013 The Digital Agency\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@trilogicommerce\" \/>\n<meta name=\"twitter:site\" content=\"@trilogicommerce\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Trilogi \u2013 The Digital Agency\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/\"},\"author\":{\"name\":\"Trilogi \u2013 The Digital Agency\",\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/#\\\/schema\\\/person\\\/798dd798bc973592ab3543d988f4a405\"},\"headline\":\"PHP2Shell, one week on: the risk to your business and three decisions to make now\",\"datePublished\":\"2026-10-29T20:02:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/\"},\"wordCount\":572,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/radar-php-1200x630-1.jpg\",\"keywords\":[\"Radar\"],\"articleSection\":[\"Trilogi News\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/\",\"url\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/\",\"name\":\"PHP2Shell, one week on: the risk to your business and three decisions to make now | Blog Trilogi \u2013 The Digital Agency\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/radar-php-1200x630-1.jpg\",\"datePublished\":\"2026-10-29T20:02:40+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/#\\\/schema\\\/person\\\/798dd798bc973592ab3543d988f4a405\"},\"description\":\"A week after the PHP2Shell patches, millions of servers remain exposed. What it means for your online store and the three decisions to make right now.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/#primaryimage\",\"url\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/radar-php-1200x630-1.jpg\",\"contentUrl\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/radar-php-1200x630-1.jpg\",\"width\":1200,\"height\":630,\"caption\":\"Ilustraci\u00f3n: escudo de seguridad iluminado sobre una red con puntos vulnerables\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/en\\\/php2shell-one-week-on-the-risk-to-your-business\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PHP2Shell, one week on: the risk to your business and three decisions to make now\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/\",\"name\":\"Blog Trilogi \u2013 The Digital Agency\",\"description\":\"Mant\u00e9ngase actualizado con las \u00faltimas noticias de eCommerce\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/trilogi.com\\\/blog\\\/#\\\/schema\\\/person\\\/798dd798bc973592ab3543d988f4a405\",\"name\":\"Trilogi \u2013 The Digital Agency\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9c575882a8de78f06919f289cda59f91a251472d49f7b6ed1d07ad086a1db5f3?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9c575882a8de78f06919f289cda59f91a251472d49f7b6ed1d07ad086a1db5f3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9c575882a8de78f06919f289cda59f91a251472d49f7b6ed1d07ad086a1db5f3?s=96&d=mm&r=g\",\"caption\":\"Trilogi \u2013 The Digital Agency\"},\"description\":\"Trilogi es una agencia especializada en tiendas online, marketing y estrategia para eCommerce. 22 a\u00f1os y +700 proyectos nos avalan. \u00bfTe ayudamos en tu negocio digital?\u00a0\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PHP2Shell, one week on: the risk to your business and three decisions to make now | Blog Trilogi \u2013 The Digital Agency","description":"A week after the PHP2Shell patches, millions of servers remain exposed. What it means for your online store and the three decisions to make right now.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/","og_locale":"es_ES","og_type":"article","og_title":"PHP2Shell, one week on: the risk to your business and three decisions to make now | Blog Trilogi \u2013 The Digital Agency","og_description":"A week after the PHP2Shell patches, millions of servers remain exposed. What it means for your online store and the three decisions to make right now.","og_url":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/","og_site_name":"Blog Trilogi \u2013 The Digital Agency","article_publisher":"https:\/\/www.facebook.com\/Trilogi.eCommerce\/","article_published_time":"2026-10-29T20:02:40+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/trilogi.com\/blog\/wp-content\/uploads\/sites\/2\/radar-php-1200x630-1.jpg","type":"image\/jpeg"}],"author":"Trilogi \u2013 The Digital Agency","twitter_card":"summary_large_image","twitter_creator":"@trilogicommerce","twitter_site":"@trilogicommerce","twitter_misc":{"Escrito por":"Trilogi \u2013 The Digital Agency","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/#article","isPartOf":{"@id":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/"},"author":{"name":"Trilogi \u2013 The Digital Agency","@id":"https:\/\/trilogi.com\/blog\/#\/schema\/person\/798dd798bc973592ab3543d988f4a405"},"headline":"PHP2Shell, one week on: the risk to your business and three decisions to make now","datePublished":"2026-10-29T20:02:40+00:00","mainEntityOfPage":{"@id":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/"},"wordCount":572,"commentCount":0,"image":{"@id":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/#primaryimage"},"thumbnailUrl":"https:\/\/trilogi.com\/blog\/wp-content\/uploads\/sites\/2\/radar-php-1200x630-1.jpg","keywords":["Radar"],"articleSection":["Trilogi News"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/","url":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/","name":"PHP2Shell, one week on: the risk to your business and three decisions to make now | Blog Trilogi \u2013 The Digital Agency","isPartOf":{"@id":"https:\/\/trilogi.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/#primaryimage"},"image":{"@id":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/#primaryimage"},"thumbnailUrl":"https:\/\/trilogi.com\/blog\/wp-content\/uploads\/sites\/2\/radar-php-1200x630-1.jpg","datePublished":"2026-10-29T20:02:40+00:00","author":{"@id":"https:\/\/trilogi.com\/blog\/#\/schema\/person\/798dd798bc973592ab3543d988f4a405"},"description":"A week after the PHP2Shell patches, millions of servers remain exposed. What it means for your online store and the three decisions to make right now.","breadcrumb":{"@id":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/#primaryimage","url":"https:\/\/trilogi.com\/blog\/wp-content\/uploads\/sites\/2\/radar-php-1200x630-1.jpg","contentUrl":"https:\/\/trilogi.com\/blog\/wp-content\/uploads\/sites\/2\/radar-php-1200x630-1.jpg","width":1200,"height":630,"caption":"Ilustraci\u00f3n: escudo de seguridad iluminado sobre una red con puntos vulnerables"},{"@type":"BreadcrumbList","@id":"https:\/\/trilogi.com\/blog\/en\/php2shell-one-week-on-the-risk-to-your-business\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/trilogi.com\/blog\/"},{"@type":"ListItem","position":2,"name":"PHP2Shell, one week on: the risk to your business and three decisions to make now"}]},{"@type":"WebSite","@id":"https:\/\/trilogi.com\/blog\/#website","url":"https:\/\/trilogi.com\/blog\/","name":"Blog Trilogi \u2013 The Digital Agency","description":"Mant\u00e9ngase actualizado con las \u00faltimas noticias de eCommerce","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/trilogi.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/trilogi.com\/blog\/#\/schema\/person\/798dd798bc973592ab3543d988f4a405","name":"Trilogi \u2013 The Digital Agency","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/9c575882a8de78f06919f289cda59f91a251472d49f7b6ed1d07ad086a1db5f3?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/9c575882a8de78f06919f289cda59f91a251472d49f7b6ed1d07ad086a1db5f3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9c575882a8de78f06919f289cda59f91a251472d49f7b6ed1d07ad086a1db5f3?s=96&d=mm&r=g","caption":"Trilogi \u2013 The Digital Agency"},"description":"Trilogi es una agencia especializada en tiendas online, marketing y estrategia para eCommerce. 22 a\u00f1os y +700 proyectos nos avalan. \u00bfTe ayudamos en tu negocio digital?\u00a0"}]}},"acf":[],"lang":"en","translations":{"en":20528,"es":20371,"ca":20527},"pll_sync_post":{},"_links":{"self":[{"href":"https:\/\/trilogi.com\/blog\/wp-json\/wp\/v2\/posts\/20528","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trilogi.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/trilogi.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/trilogi.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/trilogi.com\/blog\/wp-json\/wp\/v2\/comments?post=20528"}],"version-history":[{"count":0,"href":"https:\/\/trilogi.com\/blog\/wp-json\/wp\/v2\/posts\/20528\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/trilogi.com\/blog\/wp-json\/wp\/v2\/media\/20519"}],"wp:attachment":[{"href":"https:\/\/trilogi.com\/blog\/wp-json\/wp\/v2\/media?parent=20528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/trilogi.com\/blog\/wp-json\/wp\/v2\/categories?post=20528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/trilogi.com\/blog\/wp-json\/wp\/v2\/tags?post=20528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}