PHP Upgrade & Security Services
Two critical PHP flaws were fixed in October 2026, and any site on an older PHP version is exposed. We audit your PHP version, upgrade it to a patched release, fix what the upgrade breaks, and check that the fix is actually running.
- Tested on a copy before the live site changes
- WordPress, WooCommerce and custom PHP sites
- Works with your current hosting, remotely
What Changed in October 2026
On 21 October 2026 PHP released emergency updates for CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on CVSS v4.0. They let an attacker with no login run code on a server that handles PHP web requests, and researchers have reported attack attempts. Updating WordPress or a plugin does not fix this, because the flaw is in PHP itself.
PHP 8.5 fixed in
8.5.12
PHP 8.4 fixed in
8.4.27
PHP 8.3 fixed in
8.3.36
PHP 8.2 fixed in
8.2.35
PHP 8.1 and older
No fix: upgrade
Linux hosts often backport the fix and keep the old version number, so we check the package changelog for the CVE and not just the version string. PHP 8.2 security support ends on 31 December 2026.
What an Outdated PHP Version Puts at Risk
How a PHP Upgrade Works
Audit
We check your PHP version, extensions, plugins and custom code, and tell you what is at risk and what will need fixing.
Backup and Rehearse
We take a full backup and run the upgrade on a copy of your site first, so problems show up there and not on the live site.
Upgrade and Fix
We move to a patched, supported PHP version and fix incompatible plugins, themes and code, including functions PHP 8 removed.
Restart and Verify
We switch the live site, restart the PHP processes so the fix is really running, and test pages, forms, login and checkout.
What We Cover
Shared and Managed Hosting
Switching the PHP version in your hosting panel, and finding a host that offers a patched one if yours does not.
VPS and Dedicated Servers
Patching PHP-FPM and mod_php, restarting workers, and stopping end-of-life versions that are still running.
WordPress and WooCommerce
Plugin and theme compatibility checks, replacements for abandoned plugins, and fixes for page-builder conflicts.
Custom PHP and Laravel
Code-level fixes for removed functions and stricter syntax, plus framework and dependency upgrades.
PHP Upgrade Services by Country
We work remotely and schedule the work in your time zone. Each page covers local expectations and the major cities we serve.
Australia
Adelaide, Brisbane, Melbourne, Perth, Sydney
View country pageCanada
Calgary, Montreal, Toronto, Vancouver
View country pageIndia
Ahmedabad, Bengaluru, Delhi, Hyderabad, Mumbai, Pune
View country pageUAE
Abu Dhabi, Dubai, Sharjah
View country pageUnited Kingdom
Birmingham, Edinburgh, London, Manchester
View country pageUnited States
Chicago, Houston, Los Angeles, New York, San Francisco
View country pagePHP Upgrade Questions
Is updating WordPress enough?
No. WordPress, plugins and themes run on top of PHP, and the PHP version is set on your hosting server. The October 2026 flaws are in PHP itself, so the PHP version has to be upgraded.
What if I cannot upgrade right away?
Setting session.upload_progress.enabled=0 and restarting PHP reduces the risk from one of the two flaws. It is a stop-gap and does not replace the upgrade.
How is PHP upgrade work billed?
We scope the hours before we start, and the work is billed at your plan rate or the published hourly rate. See pricing and our maintenance packages.
Will my site go offline?
Normally there is no visible downtime. We test a copy first and switch the live site in a short window, with a rollback ready.
Find Out Which PHP Version You Are On
Submit a task with your website address and hosting provider. We will tell you what you run and what an upgrade involves.