Skip to content

Security update: All Skyrack servers are running patched PHP versions, protecting client sites against CVE-2026-109618 and CVE-2026-109619.

PHP security update: your questions answered

Are Skyrack servers protected?

Yes. All Skyrack servers run CloudLinux and are running the latest patched PHP packages, protecting client sites against the two critical PHP vulnerabilities announced on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

Why does my site show an older PHP version number?

The PHP project fixed the vulnerabilities in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Our servers use CloudLinux’s PHP builds, which carry the same fix as a backport and keep their own, lower version numbers.

For example, CloudLinux’s patched PHP 8.4 reports 8.4.26 rather than 8.4.27. A lower number does not mean your site is vulnerable.

What is backporting?

Backporting means taking a security fix from a newer release and applying it to the version already installed. The vulnerable code is fixed, but the version number stays the same. It is standard practice for enterprise Linux vendors, including CloudLinux, Red Hat and Debian.

What about older PHP versions, like 7.4 or 8.1?

The PHP project does not release updates for PHP 8.1 and older. CloudLinux provides patched builds of older PHP versions through its Hardened PHP service, so sites on those versions are covered too.

My security scanner says my PHP version is vulnerable

Many scanners judge only by the version number, so they cannot see backported fixes and report a false positive. The reliable check is the package changelog, which lists the CVE IDs that have been fixed. If you need confirmation for an audit or a client, open a support ticket.

My site is showing a WordPress or PHP error

Some sites were affected by the updates we applied across hosting accounts. Open a support ticket with your site address and our team will resolve it.

Further reading

Managed WordPress Hosting in Australia

Have our team look after your WordPress site with WP Caretaker or WP Custodian, or manage it yourself with the tools included on every WordPress hosting plan.

Management options

Two ways to have us manage your WordPress site

Every WordPress plan comes with the tools to manage a site yourself. If you would rather we did it, add one of these services to any site on your plan.

WP Caretaker

Basic WordPress Management

$15per site, per month

For sites that mostly look after themselves, where you want someone watching the updates.

  • Automatic updates set up and monitored for WordPress core, themes and plugins
  • 24 x 7 uptime monitoring
  • Manual backup rollback if a core, plugin or theme update fails

Add either service when you order a WordPress plan, or contact us to add it to a site you already host with us. Each service covers a single site.

What you getManage it yourselfWP CaretakerWP Custodian
UpdatesYou run them, using WP Toolkit on your planAutomatic updates set up and monitored by usCore, plugin and theme updates handled by our developers
MonitoringNot included24 x 7 uptime monitoring24 x 7 active response monitoring
If an update failsYou restore from a backupWe roll the site back from backupOur developers respond
Hands-on helpStandard hosting supportStandard hosting support30 minutes a month of on-demand support or content and layout updates
PriceIncluded with every WordPress plan$15 per site, per month$60 per site, per month
Who it suits

Built for sites that have to keep working

Business sites

A brochure, booking or lead generation site that has to be up, current and quick when someone searches for you. WP Custodian hands the upkeep to our developers.

WooCommerce stores

Carts and checkouts are database-heavy and unforgiving of slow servers. Server-level caching, Enterprise SSD storage and hourly backups matter more once real orders are going through.

Agencies and freelancers

Managing a dozen client sites from one WP Toolkit screen, with staging on each and free migrations when you take a new client on. Reseller plans start at $44.98/month if you need separate cPanel accounts per client.

Managed WordPress FAQ

Questions we get asked

What is the difference between WP Caretaker and WP Custodian?

WP Caretaker ($15 per site, per month) is basic management: we set up and monitor automatic updates for WordPress core, themes and plugins, watch uptime around the clock, and roll the site back from backup if an update fails. WP Custodian ($60 per site, per month) is the full service: our WordPress developers look after the site, with active response monitoring, core, plugin and theme updates, and 30 minutes each month of on-demand support or content and layout updates.

Do I need a management service at all?

No. Every WordPress plan includes WP Toolkit, so you can run updates, staging and security checks yourself at no extra cost. The services are for people who would rather not, or who want someone watching the site.

Do I still get cPanel access if you manage my site?

Yes. You get full cPanel access, along with WP Toolkit inside it. Adding WP Caretaker or WP Custodian does not take the controls away. You can still edit files, manage databases, create email accounts and install whatever you like.

Will automatic updates break my site?

WP Toolkit can run smart update checks, which apply an update to a copy of your site and compare the result before touching the live one. You also choose what updates automatically, so you can leave core on automatic and handle a fragile plugin by hand. With WP Caretaker we monitor the automatic updates for you and roll the site back from backup if a core, plugin or theme update fails.

Can I use my own caching or security plugins?

You can, though on our servers the LiteSpeed Cache plugin is the one to use because it talks to the server-level cache directly. Stacking a second page cache plugin on top usually makes a site slower, not faster. If you are unsure what to keep after a migration, ask us and we will look at the plugin list with you.

Can you move my existing WordPress site across?

Yes, our team does the move for you free of charge. Request it from the client area or read how our migrations work. Your current site stays live until the DNS is switched over.

Pick a plan, then choose how hands-on you want to be

WordPress hosting from $4.98/month. Add WP Caretaker or WP Custodian to any site, or manage it yourself with the included tools.

See WordPress plans