Policyholder Guidance for Critical PHP Vulnerabilities