Skip to content

Security update: All Skyrack servers are running patched PHP versions, protecting client sites against CVE-2026-109618 and CVE-2026-109619.

PHP security update: your questions answered

Are Skyrack servers protected?

Yes. All Skyrack servers run CloudLinux and are running the latest patched PHP packages, protecting client sites against the two critical PHP vulnerabilities announced on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

Why does my site show an older PHP version number?

The PHP project fixed the vulnerabilities in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Our servers use CloudLinux’s PHP builds, which carry the same fix as a backport and keep their own, lower version numbers.

For example, CloudLinux’s patched PHP 8.4 reports 8.4.26 rather than 8.4.27. A lower number does not mean your site is vulnerable.

What is backporting?

Backporting means taking a security fix from a newer release and applying it to the version already installed. The vulnerable code is fixed, but the version number stays the same. It is standard practice for enterprise Linux vendors, including CloudLinux, Red Hat and Debian.

What about older PHP versions, like 7.4 or 8.1?

The PHP project does not release updates for PHP 8.1 and older. CloudLinux provides patched builds of older PHP versions through its Hardened PHP service, so sites on those versions are covered too.

My security scanner says my PHP version is vulnerable

Many scanners judge only by the version number, so they cannot see backported fixes and report a false positive. The reliable check is the package changelog, which lists the CVE IDs that have been fixed. If you need confirmation for an audit or a client, open a support ticket.

My site is showing a WordPress or PHP error

Some sites were affected by the updates we applied across hosting accounts. Open a support ticket with your site address and our team will resolve it.

Further reading

WooCommerce hosting for Australian stores

WordPress hosting for online stores, from an Australian-owned host with servers in a Sydney data centre, with staging, hourly backups and free migration of your store.

Location and caching

Why server location and caching matter for a store

Servers in Sydney

Our servers are in a Sydney data centre, close to most Australian shoppers. Shorter distance means less delay on every page and every request.

LiteSpeed Cache

Our servers run LiteSpeed, and the LiteSpeed Cache plugin connects WordPress to it. Product pages, categories and your home page can be served from cache instead of being rebuilt for each visitor.

Checkout is not cached

Cart, checkout and account pages are different for every shopper, so they cannot be served from cache. For these pages the speed of the server itself decides how quick the shopper's experience feels.

What is included

What comes with a Skyrack WordPress plan

WooCommerce hosting FAQ

Questions we get asked

Can I run WooCommerce on your WordPress hosting?

Yes. WooCommerce is a WordPress plugin, and our WordPress hosting plans include WP Toolkit, LiteSpeed Cache, hourly backups and free SSL. For stores we recommend WP+ 10GB ($14.98 per month) and above.

Will you migrate my existing store for free?

Yes. The Skyrack team migrates your site for free, including products, orders and customers, generally without downtime. See the WordPress migration guide for what happens.

Are checkout and cart pages cached?

No, and they should not be. Cart, checkout and account pages are specific to each shopper. Catalogue pages can be cached with LiteSpeed Cache, which leaves the server free to handle the pages that cannot be.

How do I test a plugin update without risking my live store?

Use staging in WP Toolkit. Clone the store, run the update on the copy, check browsing and checkout, then update the live store. See the WP Toolkit guide.

How often are backups taken, and can I restore orders?

Backups run hourly through the day (4am to 9pm AET) and are stored off-site, so a daytime restore point is usually no more than an hour old. Keep in mind that a restore returns the site to that earlier point, so any orders placed after it would need to be reconciled from your payment provider records.

When should I move from shared hosting to a VPS?

Consider a managed VPS when the store is central to your business, when you want dedicated resources, or when it has outgrown the largest shared plan. Our guide VPS vs shared hosting covers the signs.

Host your store in Australia

WooCommerce Ready plans from $14.98/month, with free migration of your store.

See WordPress hosting plans