PHP 8.2.x
Affected: < 8.2.35
Fixed release: 8.2.35
WEBSITE SECURITY · UPDATES · REBUILDS
PHP Website Security Review and Upgrade
Need to update your website, but concerned about compatibility?
Start with the PHP version, website software and backups, then plan patches and testing. If the old system is difficult to maintain, we can plan a website rebuild.
Use the PHP2Shell online version checker →Start with your website URL and how it is used. No administrator password is needed.
VERSION CHECK
Affected versions and patch reference
Details checked: 2026-10-22. These are the releases that fixed this advisory. Refer to PHP or your hosting vendor for subsequent updates.
PHP 8.3.x
Affected: < 8.3.36
Fixed release: 8.3.36
PHP 8.4.x
Affected: < 8.4.27
Fixed release: 8.4.27
PHP 8.5.x
Affected: < 8.5.12
Fixed release: 8.5.12
PHP 8.1 and older branches require an upgrade or a confirmed vendor backport. Package version numbers may differ from patch status; check the vendor advisory too.
CHECK / REPAIR / IMPROVE
Address security, then improve your website
Choose an appropriate scope for your existing website and business needs.
Review and plan
Review PHP, CMS, plugin and hosting versions, then confirm backups, compatibility, responsibilities and the update plan.
Patch and verify
Back up, test and update within the agreed scope. Check the website, forms and key functions, with a rollback plan.
Website rebuild and maintenance
If the old website is difficult to update, plan a redesign, content migration, 301 redirects, mobile experience and ongoing maintenance.
LET’S REVIEW YOUR WEBSITE
Keep your website updated and make enquiries easier.
Whether you need patches or a new business website, tell us what you most want to resolve.
- Unsure which PHP version your website uses
- Concerned about WordPress, Joomla or plugin compatibility
- Looking to redesign the website and improve mobile enquiries
Scope, fees and scheduling depend on the website. If there are signs of compromise, preserve records and arrange an incident investigation. Updating alone does not remove an intrusion.