PHP security update · October 2026
Could your website be affected?
Follow the questions. If you answer yes, send the message to whoever looks after your website.
Website security decision guide
Does your website use WordPress?
Including WooCommerce shops.
No / not sure
Built with one of these?
Laravel, Drupal, Magento, Adobe Commerce, Joomla, Symfony, Craft CMS or TYPO3.
No / not sure
Have you been told it uses PHP?
No / not sure
Still not sure?
Try the free Sitewell checker ↗
It looks for clues. Only your host can confirm the fix.
Yes to any of these?
Send this to whoever manages your website
Hi, could you check whether my website uses PHP and confirm that the October 2026 PHP security update has been applied to the server running it? Thanks.
Choose the person to send it to. Nothing is sent automatically.
Your host may already have fixed it. Updating WordPress or plugins alone doesn’t update PHP.