PHP security advisory · October 2026
Two critical PHP flaws are being exploited right now. We check your site free and upgrade it safely.
Upgrading PHP takes minutes. Making sure the site still works afterwards is the real job. Our engineers rehearse every upgrade on a private copy of your site, fix what breaks and only switch the live site once it passes.
Attackers were using these flaws before the fixes came out. Our engineers check your site for unknown admin users, changed files and hidden code, clean up what they find and harden the site so it doesn’t happen again.
If your site is very old, heavily customised or slow, we will say so. We can rebuild it on Webflow or Shopify, where the platform runs and patches the servers and your team edits content without a developer.
Once your site is up to date, we keep it there. We watch for new advisories, test security updates on a staging copy first and send you a short report every month.
Runs on PHP. If the server hasn’t been updated since 21 October, the site is exposed, and older plugins often break on the jump to a supported version.
Portals, booking systems and APIs built in PHP. Upgrades mean reading the code, updating dependencies and running the tests.
Popular platforms that all run on PHP, each with its own extensions and upgrade path.
No fix is coming for these versions. Moving to a supported version is the only lasting route.
Wondertabs Pty. Ltd., Suite 108 / Level 1 55 Collins Street Melbourne, VIC 3000. +61 403 993 524
Wondertabs Pte. Ltd., 10 Anson Road #33-03, International Plaza, Singapore 079903. +65 6797 8277
Wondertabs (Thailand) Co., Ltd., Level 11, Mercury Tower 540 Ploenchit Road, Lumpini, Pathumwan, Bangkok. +66 81 803 6123
PT. Wondertabs Studio, Nicco Res. Block B3A No. 2 29444, Batam, Indonesia. +62 821 7157 9990