PHP2Shell Security Update

Your WordPress sites are protected.

We want to inform you that the recent critical PHP2Shell vulnerability (CVE-2026-109618 and CVE-2026-109619) has been fully mitigated.

This issue affected the PHP runtime itself (the software that powers WordPress), not WordPress core, themes, or plugins. It could potentially allow an unauthenticated attacker to run code on a server under certain conditions.

GoDaddy has patched all PHP versions on the Managed WordPress platform.

All of your sites hosted with us on GoDaddy Managed WordPress are now running the fixed version PHP 8.3.36.

No action is required on your part.

Learn more:

• What is PHP2Shell? — Clear overview of the vulnerability and the fix
• GoDaddy’s official security update — Confirmation that Managed Hosting for WordPress has been patched

We continue to monitor platform-level and application-level security for the sites we manage. If you have any questions, simply reply to this email or contact us at the number above.

Thank you for trusting WDTP with your website.

Web Development Technology Partners, Inc.