Skip to content

Security update: All Skyrack servers are running patched PHP versions, protecting client sites against CVE-2026-109618 and CVE-2026-109619.

PHP security update: your questions answered

Are Skyrack servers protected?

Yes. All Skyrack servers run CloudLinux and are running the latest patched PHP packages, protecting client sites against the two critical PHP vulnerabilities announced on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

Why does my site show an older PHP version number?

The PHP project fixed the vulnerabilities in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Our servers use CloudLinux’s PHP builds, which carry the same fix as a backport and keep their own, lower version numbers.

For example, CloudLinux’s patched PHP 8.4 reports 8.4.26 rather than 8.4.27. A lower number does not mean your site is vulnerable.

What is backporting?

Backporting means taking a security fix from a newer release and applying it to the version already installed. The vulnerable code is fixed, but the version number stays the same. It is standard practice for enterprise Linux vendors, including CloudLinux, Red Hat and Debian.

What about older PHP versions, like 7.4 or 8.1?

The PHP project does not release updates for PHP 8.1 and older. CloudLinux provides patched builds of older PHP versions through its Hardened PHP service, so sites on those versions are covered too.

My security scanner says my PHP version is vulnerable

Many scanners judge only by the version number, so they cannot see backported fixes and report a false positive. The reliable check is the package changelog, which lists the CVE IDs that have been fixed. If you need confirmation for an audit or a client, open a support ticket.

My site is showing a WordPress or PHP error

Some sites were affected by the updates we applied across hosting accounts. Open a support ticket with your site address and our team will resolve it.

Further reading

WordPress Hosting
Australia

Premium WordPress hosting with cPanel and WP Toolkit management. One-click installation and staging plus automatic security hardening and WP updates


  • 100% Australian Owned and Operated
  • Affordable Premium Plans from $4.98 per month
  • Transparent Pricing with No Hidden Fees
Explore Our WordPress Plans
900+WordPress Websites Hosted Locally
100'sHappy Customers Across Australia
14Years Hosting Small and Medium Business
100%Australian Owned and Operated

Australian WordPress hosting with WP Toolkit included

Our cPanel based WordPress Hosting is perfect for Australian businesses, developers, and individuals who need speed, security, and simplicity. Every plan includes WP Toolkit, making it easy to manage installations, staging, updates, and security in just a few clicks.

Unlike other providers, our cPanel-certified sales and support teams are WordPress developers - not just technicians - offering real expertise when it matters. Whether you're starting a blog, hobby or business website or growing a full-scale e-Commerce store, we're ready when you are.

Included with every plan

  • Australian Based Data Centre
  • Instant Account Provisioning & Setup
  • Free SSL Certificates
  • Free WordPress Migration
  • Hourly Off-site Backups
  • Low Contention Servers
  • Real-time Malware Scanning & Firewall
  • WordPress Toolkit
  • Enterprise Grade SSD
  • 50MB/s Disk I/O
WordPress hosting FAQ

Questions we get asked

Where are your WordPress hosting servers?

Our servers are in a Sydney data centre, so Australian visitors are served locally and your data stays in Australia. Skyrack is Australian owned, with our team operating between Sydney and Adelaide, and our DNS nodes in Sydney, Melbourne, Perth and Adelaide keep lookups quick nationwide. You can read more about the facility on our data centres page.

What is included with every WordPress hosting plan?

Every plan includes the LiteSpeed web server, Enterprise SSD storage, free SSL, unlimited email accounts and databases, hourly off-site backups and cPanel. WP Toolkit is included for one-click WordPress installs, staging and cloning, updates and security hardening. There are no lock-in contracts, and support is available by email, online chat or a call-back request.

Is migrating my WordPress site really free?

Yes. The Skyrack team moves one existing cPanel account per hosting service, with its site, databases and email, at no charge. The move is generally without downtime because we test everything on our servers before you change DNS. cPanel-to-cPanel migrations are free; ask us about other platforms. You keep your old host running until you are happy. See how it works on our free migration page, or read the guide to migrating a WordPress site.

Which WordPress plan should I choose?

Start with WP 1GB or WP 2.5GB for a blog or small brochure site. Choose WP 5GB for a business site with regular traffic, and the WP+ plans from 10GB for large media libraries, agencies or WooCommerce stores. Plans are $4.98 to $25.98 a month and you can move up at any time, so it is safe to start small. Our plan selection guide goes into more detail.

Is this cheap WordPress hosting?

It is affordable, and nothing is stripped back to get there. We put our money into the platform and our services, so fewer things go wrong and fewer support requests come in, and those lower running costs are passed on in the price. Plans start at $4.98 a month, and every one has the same platform: LiteSpeed, Enterprise SSD storage, hourly off-site backups, free SSL and WP Toolkit. Price steps up with storage, CPU and RAM, not with features being held back. The WordPress management tools are included with every plan (see what is included). If you want us to handle the upkeep, the optional add-ons are WP Caretaker ($15.00 per month) and WP Custodian ($60.00 per month), each for a single site.

What is the difference between WordPress and cPanel hosting plans?

They are the same plans: both run on cPanel in the same Sydney data centre, with the same six sizes and prices, and both include WP Toolkit. This page is written for WordPress sites, and the cPanel hosting page for any other site, such as custom PHP or a static site.

Can I upgrade my plan later?

Yes. You can upgrade as you grow, so you can start small. Billing is month to month or annual, with no lock-in contract. If a site outgrows shared hosting altogether, our managed VPS plans are the next step, and we will migrate it for you.

How reliable is the hosting?

We publish a 99.9% uptime SLA, which you can read in full on our service level agreement page, and you can see how our services are running right now on our public status page. Servers use LiteSpeed and Enterprise SSD storage, and backups run hourly through the day (4am to 9pm AET) and are stored off-site. For the details on speed, see our performance page, or read the WordPress speed checklist.

Can I get a refund if it is not right for me?

If you ask within 30 days of placing your order, we refund your hosting payment in full to your original payment method. Request it by opening a ticket with our Accounts and Billing department. The refund covers WordPress hosting plans; domain names, SSL certificates and licences are not refundable. Refunds are subject to approval under our terms of service.