What is PHP, whose flaws can take down the internet. PHP is a programming language that runs 70% of all websites while working behind the scenes. It's the engine behind WordPress, which powers about 40% websites like blogs, small business pages, government portals, online shops and news sites. If attackers exploit its two vulnerabilities, rated 9.2 out of 10 on severity scale, they can expose sensitive data and disrupt internet.