Victoria & Westshore ยท WordPress technical support
PHP Security Updates & WordPress Upgrade Help
A PHP security warning should come with a clear next step. Westshore Web helps small businesses in Victoria, Langford, Colwood, and the Westshore assess older WordPress sites, resolve compatibility problems, and plan PHP security updates.
Request a PHP security assessment
October 2026 PHP security update
Reviewed October 26, 2026
The PHP project released security updates on October 21 for CVE-2026-109618 and CVE-2026-109619. The fixed releases are PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Hosting vendors may supply patched packages or backports; the branch number alone does not establish whether a server is protected.
Ask your hosting provider to confirm the installed patch level. Updating WordPress does not update server PHP. See the official PHP security advisory for current guidance and follow-up notices. An update addresses the software flaw; it does not establish that a previously exposed site is free of compromise.
Help for WordPress sites that cannot update cleanly
PHP compatibility assessment
Review the current PHP environment, theme, plugins, and custom code to identify what could prevent a supported PHP upgrade.
WordPress repair and upgrade planning
Investigate errors, outdated components, and plugin conflicts. Agree on the repair scope, backup requirements, and testing before changing the live site.
How we approach an upgrade
- Understand the warning. Confirm the environment and the host’s security update status.
- Prepare recovery. Review backups and a rollback plan, with staging where available.
- Resolve compatibility issues. Identify components that need updates, repair, or replacement.
- Verify the result. Test key pages, forms, logins, and checkout where applicable, then agree on ongoing care.
Common PHP upgrade questions
Do I need to rebuild my WordPress website?
Not necessarily. Many existing sites can be updated after repairing outdated plugins, themes, or custom code. An assessment helps determine whether repair is practical.
Is selecting PHP 8.4 enough?
No. The exact release or vendor patch status matters. Your host should confirm that the relevant security fixes are installed.
Can a security plugin replace a PHP update?
A WordPress security plugin does not patch the PHP runtime. Coordinate the server update with your hosting provider and assess the site separately if compromise is suspected.
Can you help if my website is hosted elsewhere?
Contact us with your website address and the warning you received. We will review the access and hosting limitations before recommending a scope of work.
Send us the warning you received
Include your website address, hosting provider if known, and any PHP error message. Please do not send passwords through the contact form. We will help identify the next practical step.
Get help with PHP and WordPress
Keep your website working for your business
Explore Canadian WordPress hosting, WordPress maintenance, PHP upgrades and repair, small business SEO, and AI search optimization.