PHP Vulnerability Responses by Company

hosting.com

Global hosting
Aliases / services
hosting.com / A2 Hosting / A2Hosting
Official website
https://hosting.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

cPanel / Plesk / Enhance / Self-managed VPS

Response status
Managed services patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

PHP update completed October 22. Managed cPanel/Plesk covers PHP 5.2 onward and Enhance covers 7.4 onward. Self-managed servers require customer updates.

Scope: Completion applies to shared/managed services; PHP inside unmanaged VPS or dedicated servers remains the customer's responsibility.

What users should do

No patch action on managed services. Apply vendor updates on self-managed VPS; verify CVEs in CloudLinux package changelogs.

Official service URL

Source URLs

  1. hosting.com: PHP vulnerability responsehttps://status.hosting.com/incident/3174Response evidence
  2. https://hosting.com/blog/protecting-against-php2shell-vulnerabilities/https://hosting.com/blog/protecting-against-php2shell-vulnerabilities/Service and operation documentation
Related official sources
  1. hosting.com: PHP vulnerability responseOfficial noticeOfficial incident notice reviewed.

Comments