+7 903 755-33-76
RU Client area

Security & updates

PHP version

Updated: 30.10.2026Reading time: 1 minute

PHP is the language behind WordPress, 1C-Bitrix, Joomla and many other CMSs. You need a supported branch with the latest fixes — currently PHP 8.2 to 8.5; PHP 8.1 and earlier no longer receive official fixes.

On 21 October 2026, fixes were released for two critical vulnerabilities (CVSS 9.2): PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. PHP itself must be updated on the server — updating the CMS alone is not enough.

We test a move to a new branch on a copy of the website, because older code may need changes.

Need help? Nik.Ru specialists will set everything up for you: send an enquiry or ask the consultant.

Go to service →

Related articles

CMS and framework updatesVulnerability
Nik.Ru
Enquiry · we reply during business hours

Tell us about your task

Choose a service and tick what you need. A specialist will clarify the details and agree the price and timeline before any work starts.

Please don’t include passwords, payment details or confidential information.

DeLuxe.Ru — smart enquiry forms
PHP security · 21 October 2026
9,2 / 10
Critical severityTwo vulnerabilities in the PHP core. Fixes are already available.

Protect your website: update PHP

Under certain conditions, an attacker can execute code on the server without a login or password. The website, passwords, keys and any other data the PHP process can access are at risk.

Fixed releases:

Leave the update to specialists

We’ll check your website and server, update PHP, the CMS and extensions with compatibility in mind, and fix any other vulnerabilities we find.

Technical details

Install the fixed release of your branch or your OS vendor’s patched package; there is no need to move to 8.4 specifically. PHP 8.1 and earlier have no official fixes — check for a vendor patch or plan a move to a supported branch.

Updating the CMS alone is not enough: PHP itself must be fixed on the server. Before updating, make a backup and check compatibility; afterwards, restart the PHP services (PHP-FPM, web server) and test your websites.

Sources:PHP.net ↗PHP Foundation ↗
Administrator.ru ↗