A pair of critical vulnerabilities in PHP, the programming language that powers the modern web, has forced governments into emergency action.