Skip to content

Security update: All Skyrack servers are running patched PHP versions, protecting client sites against CVE-2026-109618 and CVE-2026-109619.

PHP security update: your questions answered

Are Skyrack servers protected?

Yes. All Skyrack servers run CloudLinux and are running the latest patched PHP packages, protecting client sites against the two critical PHP vulnerabilities announced on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

Why does my site show an older PHP version number?

The PHP project fixed the vulnerabilities in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Our servers use CloudLinux’s PHP builds, which carry the same fix as a backport and keep their own, lower version numbers.

For example, CloudLinux’s patched PHP 8.4 reports 8.4.26 rather than 8.4.27. A lower number does not mean your site is vulnerable.

What is backporting?

Backporting means taking a security fix from a newer release and applying it to the version already installed. The vulnerable code is fixed, but the version number stays the same. It is standard practice for enterprise Linux vendors, including CloudLinux, Red Hat and Debian.

What about older PHP versions, like 7.4 or 8.1?

The PHP project does not release updates for PHP 8.1 and older. CloudLinux provides patched builds of older PHP versions through its Hardened PHP service, so sites on those versions are covered too.

My security scanner says my PHP version is vulnerable

Many scanners judge only by the version number, so they cannot see backported fixes and report a false positive. The reliable check is the package changelog, which lists the CVE IDs that have been fixed. If you need confirmation for an audit or a client, open a support ticket.

My site is showing a WordPress or PHP error

Some sites were affected by the updates we applied across hosting accounts. Open a support ticket with your site address and our team will resolve it.

Further reading

Moodle Hosting
Australia

Host your Moodle learning site on Australian servers, supported by a team that knows the platform.


  • 100% Australian Owned and Operated
  • Managed Moodle Plans from $49 per month
  • Learner Data Kept in Australia
See Moodle Plans
900+WordPress Websites Hosted Locally
100'sHappy Customers Across Australia
14Years Hosting Small and Medium Business
100%Australian Owned and Operated

Managed Moodle hosting for Australian businesses and organisations

Run your own online training platform for staff inductions, compliance training, or courses for customers and partners, without per-user licence fees. Your Moodle site is hosted in a Sydney data centre, and our team installs and configures Moodle, applies updates and keeps hourly off-site backups.

Plans are sized by the number of active learners, from small teams to large organisations, with published prices and no lock-in contracts. When you need more, our team can provide custom development and theming work.

Included with every managed plan

  • Fully managed hosting
  • Moodle installed and configured
  • Moodle updates applied by our team
  • Hourly off-site backups
  • Learner data kept in Australia
  • Existing Moodle sites moved across
  • Plans sized by active learners
  • No lock-in contracts
Moodle hosting FAQ

Questions we get asked

Why self-host Moodle instead of a subscription LMS?

Moodle is open-source, so there are no per-user licence fees: you pay a fixed monthly price for a plan sized to your learner numbers. The platform is yours: you choose its plugins, branding and integrations, and your courses and training records stay with you. Our team looks after the hosting, Moodle updates and backups.

How much does managed Moodle hosting cost?

Managed Moodle plans start at $49 a month for up to 50 active learners and go to $1,449 a month for up to 50,000, with a one-off setup fee from $250. Prices include GST. For more than 50,000 learners or several Moodle sites, ask us for a quote.

What counts as an active learner?

Every Moodle user account that is not suspended. The numbers are a sizing guide: if your site grows past its plan, we will recommend the next one up. Sites with many learners online at the same time, such as during exams, may need a larger plan.

What does the setup fee cover?

Setting up your server, installing and configuring Moodle, SSL and email, and moving an existing Moodle site across if you have one.

Who looks after Moodle updates?

Our team applies Moodle security and maintenance updates. Major version upgrades are planned with you first, so you can check that your plugins and theme are ready.

Can you customise Moodle for our organisation?

Yes. Our team can provide custom development and theming work: a Moodle theme in your branding, custom plugins, and integrations with the systems you already use. Tell us what you need in the enquiry form and we will quote it separately from your hosting plan.

What kind of hosting does my Moodle site run on?

We use a number of different hosting options, including shared hosting, virtual private servers (VPS), dedicated servers and cloud hosting through providers such as AWS. Our team chooses the right setup for your learner numbers and requirements, and can change it as your organisation grows. Whichever we use, your Moodle site is managed by our team and hosted in Australia.

Is learner data kept in Australia?

Your Moodle site, database and uploaded files are stored on servers in a Sydney data centre. If you have a formal compliance requirement, confirm it with us before you order.

Can I start small and move up later?

Yes. Managed plans start at Moodle 50 for up to 50 active learners, and we move you to a larger plan as your learner numbers grow. If you would rather install and run Moodle yourself, our shared cPanel plans run Moodle from $4.98 a month.

Not sure which Moodle plan suits your organisation?

Tell us how many people you train and what you are running, and our team will recommend a plan.

Get a Quote