You may have seen news this week about a serious security vulnerability in PHP, the software that powers a large share of the world’s websites, including ours. We want to reassure you about what this means for you as a customer.
What happened
On 21 October 2026, the PHP project announced two critical vulnerabilities which, under certain conditions, could let an attacker run code on a web server. Because PHP is so widely used, it affected websites and hosting companies right across the internet.
How our sites were protected
We didn’t have to wait for the fix to be protected. Our sites sit behind Cloudflare, and firewall rules blocking attacks on this vulnerability were in place as soon as it was made public.
When the official patch was released, our hosting provider applied it straight away, and our sites are now fully patched.
Do you need to do anything?
No. There’s nothing you need to do, and you can keep shopping with us exactly as normal.
Our commitment to you
Keeping your information safe matters to us. Alongside our host’s security, we use a web application firewall, block suspicious traffic, and keep our software up to date.
If you have any questions at all, please contact us and a real person will get back to you.
EV Accessories Ltd, 23 October 2026