Common web tools left Poland's courts, hospitals and airports exposed

Poland’s government warned that critical WordPress vulnerabilities could let attackers seize servers and trigger a “critical incident,” putting a spotlight on how ordinary web software can become a single point of failure across public services.

Researchers found that common points of failure in software used to organize and display web content could have allowed hackers to run riot through government websites. The exposed or at-risk sites were not obscure pages. They included systems tied to courts, hospitals and airports, three sectors where a digital breach can affect justice, patient care and travel in minutes.

The sensitivity is sharper in Poland’s courts. Human Rights Watch described Poland’s courts as compromised in the context of judicial reforms, warning in 2021 that tribunal decisions were colliding with European rule-of-law standards. That history makes website weaknesses in the justice system more than a routine IT problem: they sit inside institutions already under pressure.

Healthcare has already shown how quickly a cyberattack can knock a service off its digital footing. The Independent Public Regional Hospital in Szczecin was forced back to a paper-based system after a huge cyberattack blocked access to its IT system, a reminder that the fallback for a modern hospital can still be clipboards, handwritten notes and manual workflows.

Airports face the same vulnerability, but at a much larger scale. SecurityWeek described a cyberattack on check-in and boarding systems that disrupted several major European airports, leaving manual check-in and boarding as the only fallback. When airport software fails, the disruption is immediate and visible to thousands of passengers, and the recovery depends on people replacing software one step at a time.

The pattern running through Poland’s courts, hospitals and airports is not about one country or one incident. It is about shared infrastructure and the concentration of risk in a handful of common tools. The harder question is how many U.S. public institutions rely on the same kind of content-management software, and how many essential services could be dragged into manual mode if one widely used layer failed at once.