Websites were taken offline after the developers of programming language PHP said "critical vulnerabilities" had been discovered.