The PHP Security Team has released security updates addressing critical vulnerabilities that could potentially allow unauthenticated remote code execution. We strongly recommend that all customers review their hosting environments and ensure their applications and software are fully updated.
Shared Hosting and Managed Servers
Our technical teams have successfully applied the required security patches and updates to the servers. Additional security mitigations remain in place as an extra layer of protection while we continue to monitor the situation.
VPS / Dedicated Unmanaged Servers
For unmanaged VPS and Dedicated Servers, customers are responsible for maintaining and securing their server software. Where applicable, please ensure that the latest PHP security updates are installed immediately.
If file-upload functionality has been temporarily restricted as part of security mitigation measures, normal functionality may be restored once the necessary security patches and protections have been fully applied.
Immediate Action Recommended
We strongly recommend that you:
Update PHP to the latest supported and patched release. If you are using PHP 8.2 or later, ensure that the latest security release for your PHP branch is installed.
Upgrade older or unsupported PHP versions wherever possible.
Update WordPress, themes, plugins, frameworks, and other PHP-based applications to their latest secure versions.
Remove unused or outdated plugins, themes, applications, and scripts.
Restrict unnecessary public access to PHP applications and administrative interfaces.
Use appropriate Web Application Firewall (WAF) rules and other security controls wherever possible.
Review your websites and servers for unusual files, processes, traffic, or other indications of compromise.
Please note that we may take necessary network-level or service-level protective action if malicious activity is detected originating from or targeting your server, in order to limit the impact and protect the hosting infrastructure and other customers.
For additional technical information regarding the PHP security advisory and recommended mitigations, please refer to the official PHP announcement:
PHP Security Advisory – October 21, 2026
Keeping PHP and all website applications up to date is essential for maintaining the security of your hosting environment.
If you have any questions or require assistance regarding this security update, please contact our Support Team.
Powered by WHMCompleteSolution
