A critical PHP security hole dropped at 10am yesterday. In 3 minutes I had check

By Wilreynolds · October 23, 2026 · Curated by George's Blog

A critical PHP security hole dropped at 10am yesterday. In 3 minutes I had checked every client. AI what a time to be alive.

WordPress, Drupal, Magento: all exposed. Roughly 40% of the internet.

Our team posted about it in Slack.

My first thought: Why wouldn't we check every client we've ever had?

Not just current clients. Every one that was in our CRM.

Past clients too.

So I fired up claude code, it did all the work:

→ Pulled all 639 client companies out of our CRM

→ Checked every website: headers, page code, blogs

→ Compared each one against todays patched versions

→ Sorted the results into a list, with the evidence for every site

The scan took 2.5 minutes. I got a CSV. What it found:

• 208 sites showing signs of PHP

• 5 running versions that are confirmed vulnerable right now

• 3 of those on versions so old theyll never get an official fix

This makes me think of 3 things I love about AI:

1 - You can scale caring about your clients, former clients, etc in ways that were almost impossible PRE-AI?

2 - You have to start asking your AI why not check everyone or what would it take to check everyone vs how do I check my 1-2-3 clients?

3 - Also while people are bombarding my inbox with low value sales emails, why not keep an eye on ways to actually help people & build trust?