On October 21, PHP released fixes for two critical flaws that could allow unauthenticated remote code execution. The patched versions are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, and affected users are urged to update immediately. The advisory specifically concerns web servers using the Apache mod_php configuration; it is neither evidence of a Bitcoin compromise nor proof of a flaw in BTCPay Server’s core software. Administrators of crypto stores connected to BTCPay Server through WooCommerce should verify that their PHP runtime includes the fixes, rather than assuming that updating a site plugin is sufficient.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
