Security is our top priority, and we want to keep you informed as soon as new developments arise. Recently, a set of PHP security vulnerabilities, commonly referred to as PHP2Shell, was publicly disclosed.
Here is a recap of how our systems team responded, tracked, and successfully resolved these vulnerabilities across our entire infrastructure.
Timeline of Events
21 Oct 2026, 17:37 BST — Initial Awareness & Precautionary Measures.
As soon as the vulnerabilities were disclosed, our systems team sprang into action. As an immediate precaution, we implemented extra security measures across our hosting platform while preparing the latest upstream patches for deployment and backporting fixes where required.
21 Oct 2026, 18:30 BST — Upstream Patches in Motion
Our system administration team applied the official upstream patches and kicked off the deployment of the latest PHP versions across our shared hosting platforms.
21 Oct 2026, 19:51 BST — Hosting Platform Rollout Complete & Cloud Servers Underway
Great progress was made as the new patched releases—PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35—along with backported fixes for older PHP versions, completed rollout on our main hosting platform. Deployment to our Cloud Servers immediately followed.
21 Oct 2026, 21:01 BST — Deployment Complete
All Cloud Servers successfully received PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, alongside the fully backported older versions. This marked the successful completion of our deployment pipeline.
Summary
All PHP versions across all of our platforms are now fully patched and secured against the PHP2Shell vulnerabilities. No further action is required on your end, but as always, if you have any questions or need assistance, our support team is here to help!
For any issues or for extra support, feel free to get in touch with our team here: hosting@eprmarketing.co.uk
