I will secure your wordpress site against the critical PHP vulnerability


Level 1
About this gig
On 21 October 2026, two critical vulnerabilities in PHP were made public (CVE-2026-109618 and CVE-2026-109619, also called PHP2Shell, CVSS 9.2). PHP runs underneath every WordPress site, so many site owners wonder what to do.
The main fix is simple: run a supported PHP version (8.2+) with the latest patch. Older versions such as 7.4, 8.0 and 8.1 no longer receive fixes. The tricky part is updating without breaking your site, because old plugins and themes do not always work on newer PHP.
What I do:
I check which PHP version your site runs and what your host offers
I make a backup first
I update to a patched, supported PHP version
I test your site afterwards: pages, forms, checkout and admin
In Premium, I scan for signs of a break-in: webshells, hidden spam pages shown only to Google, unknown Search Console owners and unknown admin accounts
You get a short, clear report of what I checked, what I changed and what I found.
I have built and maintained WordPress sites for over 10 years, including security incidents.
No website can be made 100% safe, and I will not promise that. What I can do is make sure your site runs on a patched PHP version and tell you what I find.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Michael L.
WordPress Developer and Custom Web Tools
Level 1
- FromNetherlands
- Member sinceJul 2021
- Avg. response time3 hours
- Last deliveryabout 6 hours
Languages
English, Dutch
My Portfolio
Other Website Maintenance Services I Offer
FAQ
Is my site affected?
If your server runs PHP, the update is relevant. Sites on old versions (7.4, 8.0, 8.1) need an upgrade to 8.2 or newer, as those no longer get security fixes. I check your exact version in the Basic package.
What if my site breaks on the new PHP version?
I always make a backup first. If a plugin or theme is not compatible, I fix it or roll back and tell you what is needed.
Can you also clean a hacked site?
Yes. The Premium package includes a scan and cleanup of common findings. If the infection is large, I will send you a custom offer first.

