In August 2026, according to recordedfuture.com, Wiz Research discovered the PHP vulnerability using AI-assisted research tools and confirmed it within a few days.1 This discovery shook 70% of the Internet, as PHP is widely used in web applications, particularly in web content management systems such as Drupal and WordPress.2 However, vulnerabilities in PHP are not uncommon. According to Zhao et al. ‘as of July 2024, PHP vulnerabilities accounted for 45.3% of all entries in the exploit database’.3 I thought it would be a good idea to check the horoscope of this scripting language, and I found it somehow. In my post, I will focus on the astrological aspects of the latest events related to PHP. Therefore, if you would like to know more about PHP, please visit websites dedicated to programming, such as php.net. But for now, let’s have a look at the horoscope of PHP, its solar return chart for 2026 year, and the transits at the moment of discovering the mentioned vulnerabilities.
The Birth Of PHP
PHP was created in 1994 but released in 1995 by Rasmus Lerdorf, a Danish-Canadian programmer born in Greenland, who holds a Systems Design Engineering degree from the University of Waterloo.4 According to Lerdorf cited by Severance on IEEE Explore, in 1995, Lerdorf lived in Toronto, Canada and ‘doing Web application consulting for a number of companies‘.5 The first version of PHP was a tool to support Lerdorf’s work on number of web applications he worked on.6 Therefore, I adopted Toronto, the birthplace of PHP.
I took the moment of an announcement of PHP on Google groups as the date and time of birth.7 The source is cited on the official PHP site, which makes this date and time more legitimate.8 Below is the chart casted for 08.08.1995 at 3 a.m. local time in Toronto, Canada.

Houses: Regiomontanus
A Few Words About This Horoscope
The ascendant is in Aries, a fiery and cardinal sign ruled by Mars, making this scripting language easy to use but difficult to manage.10 Mars, the ruler of the ascendant, is in Virgo and the 6th house, which is the house of sickness. This means that there is something in the core of this language that makes its biggest advantage a weakness: weak typing of PHP may cause inconsistencies, and it is hard to find where are the bugs in code, which may result in the code that sometimes works but sometimes it does not.11 The Sun is in Gemini, the airy mutable sign of communication and spreading information, which perfectly fits the subject of this horoscope, the language commonly used to build websites (specifically to manage the content often in various languages).12 The Sun is peregrine, but at least Mercury, the Sun’s ruler, is in the same sign and in its own domicile, which is favourable for the Sun. The Sun and Mercury dwell in the 2nd house – the allies or rather the community developing PHP is the strength and core value of this language.13 Finally, the midheaven, or Medium Coeli, in Capricorn is ruled by Saturn in Pisces and 12th house, which shows that the language is not and is not likely to be the most popular, which is reflected in the rankings of popularity.14
One of the many critical moments
As already mentioned, in August 2026, a cloud and AI security company discovered a security vulnerability in the PHP language.15 This was not the first security threat to be discovered. In 2025, there were also two vulnerabilities discovered, so this year it was nothing uncommon.16 As the moment of discovering vulnerability, I took 12:00. In addition, I checked the solar return chart for this moment and combined it with transits and the birth chart into a multiwheel chart to create a base for a year prediction.

Middle circle: Solar return 07.06.2026 15:05 UTC-4 Toronto, Canada
External circle: discovery of the vulnerability 19.08.2026 12:00 (exact time unknown) UTC-4 Toronto, Canada18
Houses: Regiomontanus
Solar return and transits
First, let’s focus on the solar return chart. As one can see, the axes of the birth chart and the solar return are in opposition: natal midheaven on the Imum Coeli of the solar return chart and the same with the ascendants and the descendants. This is not a good sign, meaning the upcoming solar year will be difficult. The lord of the natal ascendant, Mars, sits in the 8th house in the solar return chart. In addition, he is in Taurus, the sign of his detriment, so he is not in good condition. This Mars falls in the 1st house of the natal chart, bringing a bad aura in this solar year. The natal midheaven’s ruler, Saturn, is in Aries in the solar return chart, where Saturn is in fall, so the planet is in a bad condition. In addition, Saturn from the solar return is in the 12th house of the natal chart, repeating the natal house location, which should attract attention. The 12th house is a house of joy for Saturn, but in this case, there is nothing to be happy about because Saturn in this house has more power to scare, and it is a bad omen. This may herald a further decline in PHP usage. The bad predictions may be balanced by the two benefics in the 10th house, Jupiter and Venus, which are both well dignified, so these two planets may make the year less harmful for PHP. On the other hand, Jupiter rules the 8th and 12th natal houses, which may cause troubles in this specific horoscopic configuration. Venus rules the 7th natal house, the house of enemies, and being in the 10th in solar return, she may signify the hackers trying to harm PHP users.
What is the future of PHP? Well, Pluto started transiting the 11th natal house, bringing transformative and difficult changes to PHP, and more vulnerabilities discovered may force radical changes. Uranus started transiting the 2nd house, meaning that the community owning the code may fall into chaos, trying to implement changes in an uncoordinated way. These transits bring into sharp focus the emerging security challenges resulting from the use of AI for vulnerability scanning.
What happened?
According to theregister.com, Cloudflare reported massive attacks targeting vulnerabilities in a week before the patch was released.19 It seems that the weakness was not unnoticed, but was it dangerous? According to astrological principles, it was a dangerous moment, but not dangerous enough to cause a global catastrophe. What is interesting is that the attacks before the PHP update occurred a few days before the hunter’s full moon, which highlights the type of situation.20 Those who set up proper security procedures in their projects, updated their PHP immediately, or patched security vulnerabilities were not hunted, but those who did not probably will have to face consequences.
Posted by
References:
- Insikt Group®, ‘PHP2Shell Exploitation: Two Critical PHP Flaws Explained’, Recorder Future, 21 October 2026, sect. Timeline of Events https://www.recordedfuture.com/blog/php2shell-vulnerability-exploitation [accessed 29 October 2026].
Insikt Group®, ‘PHP2Shell Exploitation: Two Critical PHP Flaws Explained’, Recorder Future, 21 October 2026, sect. Timeline of Events https://www.recordedfuture.com/blog/php2shell-vulnerability-exploitation [accessed 29 October 2026]. ↩︎ - Sagi Tzadik and others, ‘PHP2Shell: AI Uncovers Critical RCE Vulnerabilities Affecting 70% of the Internet | Wiz Blog’, Wiz.Io, 21 October 2026, sect. Responsible disclosure timeline https://www.wiz.io/blog/php2shell-php-rce [accessed 29 October 2026]. ↩︎
- Jiazhen Zhao and others, ‘Yama: Precise Opcode-Based Data Flow Analysis for Detecting PHP Applications Vulnerabilities’, IEEE Transactions on Information Forensics and Security, 20 (2025), pp. 7748–63 (p. 7748), doi:https://10.1109/TIFS.2025.3592537. ↩︎
- ‘Bio’, Lerdorf.Com, n.d. <https://lerdorf.com/bio/> [accessed 29 October 2026]; Charles Severance, ‘Inventing PHP: Rasmus Lerdorf’, Computer, 45.11 (2012), pp. 6–7 (para. 1), doi:https://10.1109/MC.2012.379. ↩︎
- Severance, ‘Inventing PHP’, para. 1. ↩︎
- Severance, ‘Inventing PHP’, para. 1. ↩︎
- Rasmus Lerdorf, ‘Announce: Personal Home Page Tools (PHP Tools)’, Google Groups, 8 August 1995 https://groups.google.com/g/comp.infosystems.www.authoring.cgi/c/PyJ25gZ6z7A/m/M9FkTUVDfcwJ [accessed 27 October 2026]; Severance, ‘Inventing PHP’, para. 1. ↩︎
- ‘PHP: History of PHP – Manual’, n.d., para. 1 https://www.php.net/manual/en/history.php.php [accessed 29 October 2026]. ↩︎
- Lerdorf, ‘Announce: Personal Home Page Tools (PHP Tools)’. ↩︎
- ‘Advantages and Disadvantages of PHP’, GeeksforGeeks, 23 July 2025 <https://www.geeksforgeeks.org/php/advantages-and-disadvantages-of-php/> [accessed 30 October 2026]. ↩︎
- ‘Weak Typing | PHP | CodeBasics’, n.d. <https://code-basics.com/languages/php/lessons/data-types-weak-typing> [accessed 30 October 2026]. ↩︎
- According to W3techs, as of October 30, 2026, 69.2% of websites use various server-side programming languages. ‘PHP Usage Statistics, October 2026’, n.d. https://w3techs.com/technologies/comparison/pl-php [accessed 30 October 2026]. ↩︎
- Roberto B., ‘Why PHP?’, DEV Community, 24 November 2023 https://dev.to/robertobutti/why-php-2e4h [accessed 30 October 2026]. ↩︎
- Paul Jansen, ‘TIOBE Index’, TIOBE, n.d. <https://www.tiobe.com/tiobe-index/> [accessed 31 October 2026]; ‘Technology | 2024 Stack Overflow Developer Survey’, n.d. <https://survey.stackoverflow.co/2024/technology#2-programming-scripting-and-markup-languages> [accessed 31 October 2026]; Sweta Bose, ‘The Most Popular Programming Languages of 2025: A Comprehensive Overview’, Cyber Security News, 7 February 2025 <https://cybersecuritynews.com/the-most-popular-programming-languages-of-2025/> [accessed 31 October 2026]. ↩︎
- Tzadik and others, ‘PHP2Shell’. ↩︎
- Chris DeMars, ‘5 PHP Vulnerabilities In 2025 & How To Secure Them’, TuxCare, 22 April 2025 <https://tuxcare.com/blog/php-vulnerability/> [accessed 31 October 2026]; Kaaviya, ‘Multiple PHP Vulnerabilities Allow SQL Injection & DoS Attacks – Update Now’, Cyber Security News, 4 July 2025 <https://cybersecuritynews.com/multiple-php-vulnerabilities/> [accessed 31 October 2026]. ↩︎
- Lerdorf, ‘Announce: Personal Home Page Tools (PHP Tools)’. ↩︎
- Insikt Group®, ‘PHP2Shell Exploitation’. ↩︎
- Carly Page, ‘Hackers Pile on PHP2Shell as AWS Reveals Attacks Began before Disclosure’, Theregister, 22 October 2026 <https://www.theregister.com/cyber-crime/2026/10/22/hackers-pile-on-php2shell-as-aws-reveals-attacks-began-before-disclosure/5304749> [accessed 31 October 2026]. ↩︎
- Vigdis Hocken and Anne Buckle, ‘The Hunter’s Moon Lights Up the October Sky’, n.d. <https://www.timeanddate.com/astronomy/moon/hunters.html> [accessed 31 October 2026]. ↩︎
Featured image: Venus Gazing at Toronto Made of stock images from Canva & Sculptuur van hurkende Venus, Anonymous, c. 1880 – c. 1904, Rijksmuseum, Public Domain.
