I will fix PHP vulnerabilities and secure your website


About this gig
Has your website been affected by the latest PHP security vulnerabilities?
In October 2026, critical PHP flaws CVE-2026-109618 and CVE-2026-109619 were disclosed. A separate session-configuration risk, CVE-2026-115560, also requires attention in certain setups.
I help website owners investigate and fix relevant PHP security issues without unnecessary rebuilding.
WHAT I CAN DO:
- Check your PHP version and hosting configuration
- Identify exposure to relevant published CVEs
- Confirm a backup and agree a safe update plan
- Apply supported PHP updates or host/vendor patches
- Review WordPress, themes and plugins (package-dependent)
- Apply appropriate configuration hardening
- Test key website features after changes
- Provide a plain-English findings and actions report
WHY CALEDAPT?
25 years' experience in web and graphic design, practical recommendations and clear documentation. If your hosting provider can safely apply the patch, I'll tell you.
One website/environment per package. Malware cleanup, full penetration testing and complex application migrations are not included.
MESSAGE ME BEFORE ORDERING so I can check your setup and confirm the right package.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Bryan
Your solution for app and web development needs!
- FromUnited Kingdom
- Member sinceFeb 2016
- Last delivery1 year
Languages
English
My Portfolio
FAQ
Can you fix the latest critical PHP vulnerabilities?
Yes. I can assess exposure to CVE-2026-109618 and CVE-2026-109619 and apply appropriate supported PHP security updates where your hosting access and environment permit. I will also review relevant mitigation requirements.
Do you support WordPress and WooCommerce?
Yes. I work with WordPress and WooCommerce websites, as well as compatible custom PHP applications. WordPress core, plugin and theme checks are included in the appropriate packages. Complex compatibility issues may need a custom quote.
Will updating PHP break my website?
PHP upgrades can cause compatibility problems, particularly with older themes, plugins or custom code. I assess relevant risks, confirm the backup or recovery arrangements and test agreed website functions after changes. Zero downtime cannot be guaranteed.
Can you fix CVE-2026-115560?
I can check whether your application meets the specific conditions for this vulnerability and apply the PHP project's recommended mitigation where appropriate. As of 26 October 2026, PHP has not yet released the full patch, so mitigation is not the same as a permanent software fix.
What if my website is running PHP 7 or an older version?
Older PHP versions may be unsupported and require migration to a maintained release. I can assess your situation and recommend a sensible upgrade route. Major application migrations and compatibility rewrites require a separate quotation.
Do you need my hosting login details?
Access depends on your hosting environment and the work agreed. Where needed, I will request temporary, limited-permission access through an appropriate secure method. Please do not include passwords in your initial enquiry.
Can you work on shared hosting, cPanel, Plesk or a VPS?
Yes, subject to the permissions available. On managed or shared hosting, some PHP updates must be performed by the hosting provider. I can identify the required changes and help verify that they have been implemented.
Can you remove malware from a hacked website?
This gig covers preventive patching and agreed security remediation, not comprehensive incident response. If your website is already compromised, please contact me first so we can assess whether a separate malware removal or recovery service is needed.
Will my website be completely secure afterwards?
No responsible developer can guarantee permanent security. I address the vulnerabilities and configuration issues within the agreed scope, verify the changes where possible and explain any remaining risks or recommended actions.
What exactly will I receive when the work is finished?
You will receive a summary of what was checked, updates or changes applied, the testing performed, and any outstanding recommendations. Standard and Premium packages provide more detailed written findings.

