The PHP Foundation faces significant operational constraints, with Executive Director Elizabeth Barron serving as the only full-time staff member. The team relies on contractors and external contributors to maintain the PHP core and address security vulnerabilities.
A lack of funding contributed to delays in resolving an out-of-memory vulnerability, which was initially identified in 2024 but led to exploits in 2026. The development team struggled to address the issue due to limited resources and coordination challenges.
Data indicates that nearly 73% of PHP installations currently run on versions that have reached their end-of-life. Specifically, 7.7% of sites still utilize version 5.x, which was released in 2005 and reached its final sunset in 2018.
While patches for the 8.x branch are available, many administrators delayed updates, leading to prolonged website downtime. The transition between major versions requires code modifications, though automated tools exist to facilitate these updates.
