On October 21, 2026, The PHP Security Team and the PHP Foundation officially announced and released emergency patches to PHP. The releases immediately patch two critical security vulnerabilities which were detected using A.I.
You can read more about this here: CBC.ca Article
What is PHP?
PHP (Hypertext Preprocessor) is a free, open-source, server-side programming language designed specifically for web development. PHP powers 70% of all the websites globally.
What is HostSellers Doing?
Our Admins have done emergency maintenance last night to update all PHP versions PHP 7.4, PHP 8.4, PHP 8.5 to latest stable builds PHP 7.4.33 (with security patches), PHP 8.4.27, PHP 8.5.12. Preventing of CVE-2026-109618 and CVE-2026-109619. As well, additional mitigation changes to the server configuration were added.
What this means for you?
HostSellers is taking care of the service side of things. If you run a website that utilizes PHP (ie: Wordpress) always make certain that you are running the latest patch release version. Make certain that your version of PHP is current 8.x stream. While patching PHP is our responsibility, you must be diligent in ensuring that your version of Wordpress and all themes and plugins are also patched and current.
PHP versions can be managed from your Web Portal Control Panel. If you require assistance or have any questions about this issues, please do not hesitate to contact us at any time.
