The British Independent Retailers Association (Bira) is urging independent retailers to review their website security following a warning over serious vulnerabilities affecting PHP, a technology used by millions of websites worldwide.
The association, which represents more than 6,000 independent retailers across the UK, has advised businesses to contact their website developers or hosting providers as a priority to ensure their systems are protected.
The warning follows an advisory from the PHP Foundation identifying two serious security vulnerabilities, which could potentially allow cyber criminals to execute commands on affected web servers.
PHP is widely used by websites built on platforms including WordPress and WooCommerce, meaning many independent retailers could be using the technology without necessarily being aware of it.
Andrew Goodacre, CEO of Bira, said: “This is a serious warning and one that independent retailers should not ignore. Many small shops now rely on their website to take orders, show stock and stay in touch with customers, and a large number of those sites run on PHP without the owner ever knowing it.
“We have said many times that no business is too small to be targeted by cyber criminals, and that is very much the case here.”
The National Cyber Security Centre (NCSC) has also encouraged UK organisations to take immediate action to address the vulnerabilities.
According to the PHP Foundation, security fixes are available in versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
Businesses using PHP 8.1 or older versions, which no longer receive security updates, are being encouraged to upgrade to a supported version.
Mr Goodacre added: “You do not need to be a technical expert to protect your business. Simply contact whoever built or hosts your website and ask them to confirm that PHP has been updated to the latest fixed version.
“If your site is running an older version that is no longer supported, now is the time to get it upgraded. It is a quick conversation that could save a great deal of trouble.”
Bira has previously highlighted the growing threat of cyber crime to smaller retailers through its High Street Matterspodcast.
An episode titled No Business Too Small – Protecting Independent Retailers from Cyber Crime featured Mr Goodacre alongside retail technology expert Melissa Minkow of CI&T and Bira member Andrew Maben of Kevin’s Schoolwear, who shared his experience of a cyber attack.
Independent retailers seeking further guidance can visit the National Cyber Security Centre website or access Bira’s cyber security resources.
Stay Ahead in the Housewares Industry
Never miss a beat in the world of housewares. Subscribe to our weekly newsletter for the latest industry news, insights, and trends—delivered straight to your inbox. Plus, get six issues a year of our expertly curated magazine, published at key points to keep you informed and inspired.
Subscribe now: https://housewareslive.net/registration/
