Thankfully, Jagex's use of PHP is very limited and our exposure has been low.
However, out of an abundance of caution, if you reuse your Jagex Account password elsewhere on the internet we'd strongly advise changing it. In general, if you reuse passwords on other platforms or services, we'd advise changing those too.