Browse categories
Explore
Fiverr Pro
English
$
USD
I will fix php2shell and wp2shell, patch PHP and secure your wordpress site
Faizan Farooq
About this gig
Is your website still exposed to php2shell?
PHP released emergency patches on 21 Oct 2026 for two critical flaws (CVE-2026-109618 and CVE-2026-109619, rated 9.2/10). Every PHP website is affected: WordPress, WooCommerce, Laravel, Magento, custom PHP. Attackers are already exploiting it and governments took sites offline this week.
WordPress sites face a second one: wp2shell (July 2026) is still hitting sites that never auto-updated.
WHAT YOU GET
- Version check: are you on PHP 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12 and WordPress 7.0.2 / 6.9.5?
- Safe PHP upgrade with backup first and compatibility check
- Scanner proof after the fix (screenshots included)
- Check whether you were already hacked before the patch
- Hardening so you are protected against the next one
WHY ME
Senior full stack developer, 7+ years, 100+ Fiverr reviews. I run a web agency and patched every client site within hours of release. cPanel, Plesk, Cloudways, WP Engine, Kinsta, SiteGround, Hostinger, DigitalOcean, VPS.
NOT SURE IF YOU ARE AFFECTED?
Message me your URL. I will check for free before you order.
Cannot upgrade yet because of old plugins? I will apply the temporary mitigation and a WAF while we plan the upgrade.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Faizan Farooq
Faizan Farooq
Shopify WordPress Developer
- FromPakistan
- Member sinceSep 2026
Languages
English
I am a Shopify and WordPress Developer with over 4 years of experience specializing in AI-powered Vibe Coding Tools and custom eCommerce solutions. I have extensive expertise in building scalable, user-friendly websites using Liquid, PHP, and modern React-based frameworks. I focus on delivering high-quality, conversion-focused digital solutions for startups and agencies.
My Portfolio
FAQ
My hosting company says they already patched. Do I still need this?
Hosts patch the server, but your site may be pinned to an older PHP version, and the patch does nothing if your site was compromised before it. I verify both.
Will upgrading PHP break my site?
I take a full backup first and check plugin and theme compatibility before switching versions. If anything breaks, I fix it or roll back.
What is the difference between php2shell and wp2shell?
php2shell is in PHP itself and affects every PHP website. wp2shell is in WordPress core (versions before 6.9.5 / 7.0.2). WordPress sites need both checked.
What access do you need?
Hosting panel (cPanel, Plesk or similar) or SSH, plus WordPress admin for WordPress sites. Temporary access is fine. Change the password after delivery.
My site is already hacked. Which package?
Premium, or message me first and I will tell you what it needs.
Do you work with Laravel, Magento or custom PHP?
Yes. Add the Laravel / custom PHP extra.
What do I get as proof?
Before and after phpinfo screenshots, scanner output for both vulnerabilities, and a short written report of what was changed.
