Skip to content

Security update: All Skyrack servers are running patched PHP versions, protecting client sites against CVE-2026-109618 and CVE-2026-109619.

PHP security update: your questions answered

Are Skyrack servers protected?

Yes. All Skyrack servers run CloudLinux and are running the latest patched PHP packages, protecting client sites against the two critical PHP vulnerabilities announced on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

Why does my site show an older PHP version number?

The PHP project fixed the vulnerabilities in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Our servers use CloudLinux’s PHP builds, which carry the same fix as a backport and keep their own, lower version numbers.

For example, CloudLinux’s patched PHP 8.4 reports 8.4.26 rather than 8.4.27. A lower number does not mean your site is vulnerable.

What is backporting?

Backporting means taking a security fix from a newer release and applying it to the version already installed. The vulnerable code is fixed, but the version number stays the same. It is standard practice for enterprise Linux vendors, including CloudLinux, Red Hat and Debian.

What about older PHP versions, like 7.4 or 8.1?

The PHP project does not release updates for PHP 8.1 and older. CloudLinux provides patched builds of older PHP versions through its Hardened PHP service, so sites on those versions are covered too.

My security scanner says my PHP version is vulnerable

Many scanners judge only by the version number, so they cannot see backported fixes and report a false positive. The reliable check is the package changelog, which lists the CVE IDs that have been fixed. If you need confirmation for an audit or a client, open a support ticket.

My site is showing a WordPress or PHP error

Some sites were affected by the updates we applied across hosting accounts. Open a support ticket with your site address and our team will resolve it.

Further reading

Skyrack

Free website migration

Moving to Skyrack is free and there is no downtime. We copy your site, test it on our servers, then switch the DNS once you are happy with what you see.

Request a migrationTalk to us
Free migration

We do the move, you keep trading

Changing hosts is the job most people put off, so we take it off your hands. Our Australian team handles the copy, the checking and the cutover for cPanel accounts and WordPress sites, at no charge, on every plan. Your existing site stays live on your old host the whole time.

cPanel accounts

If your current host runs cPanel, we move the whole account across rather than rebuilding it piece by piece.

  • Website files, including anything outside the document root
  • MySQL databases and their users
  • Email accounts, mailbox contents, forwarders and autoresponders
  • DNS zone records, cron jobs, subdomains and addon domains

WordPress sites

WordPress moves from any host and any control panel. If we can reach the files and the database, we can move it.

  • Core files, themes, plugins and the full uploads library
  • The database, with search and replace handled if a URL changes
  • WooCommerce stores, including orders and customer records
  • The site set up in WP Toolkit with LiteSpeed Cache configured
How it works

Five steps from request to done

  1. 01

    Request the migration

    Order your plan, then lodge a migration request from the client area with the domains involved and access to your current host. Prefer to talk it through first? Contact us and we will scope it with you.

  2. 02

    We copy everything across

    We take a full copy of the site, databases and mailboxes onto your new Skyrack account. Nothing is changed at your old host, and your live site keeps serving visitors from it.

  3. 03

    We verify the copy

    We test the site on our servers before any DNS changes, using a temporary address. Pages, forms, logins, carts and email all get checked, and you can review it yourself before we go further.

  4. 04

    The DNS switch

    Lower the TTL on your DNS records a day beforehand so the change propagates quickly, then point them at Skyrack. If your DNS is still with the old host or your registrar, we can make the change for you.

  5. 05

    Done, and watched

    Once traffic is arriving here we issue the free SSL certificate and confirm mail flow. Hourly backups start immediately. Leave the old hosting running for a week, then cancel it.

Before we start

What we need from you

A migration goes fastest when the access details are right first time. Have these ready when you lodge the request.

  • Login details for your current host, usually the cPanel or control panel username and password.
  • The WordPress administrator login for each site, so we can check it after the copy.
  • A list of every domain and subdomain that should come across, including any that only handle email.
  • Where your DNS is managed: the old host, your registrar, or somewhere like Cloudflare.
  • Whether two-factor authentication is on, since we will need you to approve the login.
  • Anything unusual, such as a payment gateway or a site under active development.
Downtime

Nothing goes offline

Your old host keeps serving the live site for the entire migration and we only ever read from it. The copy on our servers sits alongside it, invisible to visitors, until the DNS is pointed here.

When the DNS changes, visitors reach whichever copy their resolver knows about, and both are live and working. That is why we ask you to leave the old hosting active for a week rather than cancelling it the same day.

  • No downtime during the copy or verification
  • Both sites live through the DNS change
  • Free SSL issued before the switch
  • Mail flow checked after the cutover
Migration FAQ

Questions we get asked

How long does a migration take?

Most single sites are copied and verified well inside a day. Large accounts, big WooCommerce stores and reseller accounts with many cPanel users take longer, because of the size of the files and mailboxes involved. We will tell you what to expect once we have looked at the account.

What does it cost?

Nothing. Free migration of cPanel accounts and WordPress sites is included with our hosting plans. You pay for the plan, not the move.

Does my email come across as well?

Yes. On a cPanel account we move the mailboxes and their contents, along with forwarders and autoresponders. Email hosting with unlimited mailboxes is included with our WordPress and cPanel plans, within the storage on your plan. If your mail is not on cPanel, tell us and we will work out the best way to bring it across.

Will my site go down?

No. Your old host stays live until the DNS moves, and both copies run during the switch, so visitors always reach a working site. There is no maintenance window.

Who changes the DNS?

Either of us. If you manage your own DNS we send you the exact records and a time to lower the TTL first. Otherwise, give us access and we will make the change and confirm when it has propagated.

What if my current host does not use cPanel?

WordPress sites move from any host, whatever the control panel. For other sites on a different panel we look at it case by case, and usually we can still do the move. Contact us with your current setup and we will tell you straight away.

Ready to move to Skyrack?

Lodge a migration request from the client area and our Australian team will take it from there.

Request a migration