Overnight, fixes were released for two serious security issues affecting PHP, the software that powers WordPress and many other websites.
Importantly, this does not mean your website has been breached. The important thing is making sure the relevant security updates have been applied by whoever manages your website hosting.
For websites hosted with MyWork, no action is required from you. WP Engine has rolled out the relevant updates, and our technical team has also updated the AWS servers we manage.
This is the sort of work we keep across in the background so our clients don’t have to monitor technical security announcements themselves.
We’ve put together a short, plain-English explanation of what happened, why it matters and what to do if your website is hosted elsewhere: Read our website security update
If MyWork hosts your website, there is nothing you need to do for this update.
If your website is hosted with another provider, we recommend asking them to confirm that the latest PHP security fixes have been applied.