We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glue

We've spent the past several decades using duct tape, string, and chewing gum to chain the world's computers together into this thing we call the internet, so there's really no good reason to be surprised that most of it is full of software containing vulnerabilities that are practically just as old.

Summary from The Register Security.