A vulnerability in core PHP code had reportedly been known for a long time. Numerous websites went offline as a result.