PHP Vulnerability Responses by Company

Hosting Plus

Global hosting
Aliases / services
Hosting Plus / hostingplus.cl / HostingPlus
Official website
https://www.hostingplus.cl/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

CloudLinux hosting / cPanel PHP Selector

Response status
Patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The provider reports applying and individually verifying backported fixes for both CVEs in system PHP and PHP Selector across its hosting servers, including PHP 7.4, 8.0 and 8.1.

Scope: Backports may retain displayed versions. Self-managed VPS and dedicated servers require separate updates.

What users should do

Hosting customers need no additional action. Test compatibility before moving from old PHP.

Official service URL

Source URLs

  1. PHP2Shell: Hosting Plus remediationhttps://www.hostingplus.cl/blog/php2shell-tu-sitio-en-hosting-plus-ya-esta-protegido/Response evidence

Self-managed VPS and dedicated servers

Response status
Customer update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The official notice requires owners running PHP on self-managed VPS or dedicated servers to apply fixes. Hosting completion does not cover this scope.

Scope: Check distribution/vendor backports for old PHP. Do not extend hosting completion to managed VPS without explicit evidence.

What users should do

Update PHP, restart PHP-FPM or Apache, and verify the patched runtime.

Source URLs

  1. PHP2Shell: Hosting Plus remediationhttps://www.hostingplus.cl/blog/php2shell-tu-sitio-en-hosting-plus-ya-esta-protegido/Response evidence
Related official sources
  1. PHP2Shell: Hosting Plus remediationOfficial noticeScope and update status checked in the official notice.

Comments