Normally updates like this are patched quietly, and sometimes without disclosing what exactly the exploit is

This one was leaked early and tutorials supposedly popped up on Twitter, all before the patches were released to relevant software

On top of that, it was a pretty bad exploit (RCE)

So websites were taken offline because either

• they needed to wait for someone with experience to confirm it was patched and safe
• they needed to wait for an update to be sent their way