Hostinger
- Aliases / services
- Hostinger / hostinger.com
- Official website
- https://hostinger.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Web / Cloud / Agency / cPanel Hosting
- Response status
- Patched
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
The official notice confirms managed-hosting PHP patches.
Scope: Excludes VPS. Version numbers can remain unchanged.
What users should do
No patch action required. Check the build date for backports.
Official service URL
Source URLs
- Hostinger: PHP vulnerability responsehttps://www.hostinger.com/blog/protecting-php2shell/Response evidence
- https://www.hostinger.com/support/how-to-protect-your-vps-from-the-php2shell-php-vulnerabilities/https://www.hostinger.com/support/how-to-protect-your-vps-from-the-php2shell-php-vulnerabilities/Response evidence
VPS — customer-managed PHP
- Response status
- Customer update required
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Managed-hosting automatic patches exclude VPS.
Scope: Includes cPanel VPS. Configuration mitigation alone is not a complete fix.
What users should do
Install vendor fixes, restart and verify active PHP.
Source URLs
- Hostinger: PHP vulnerability responsehttps://www.hostinger.com/blog/protecting-php2shell/Response evidence
- https://www.hostinger.com/support/how-to-protect-your-vps-from-the-php2shell-php-vulnerabilities/https://www.hostinger.com/support/how-to-protect-your-vps-from-the-php2shell-php-vulnerabilities/Response evidence
Related official sources
- Hostinger: PHP vulnerability responseOfficial noticeOfficial incident notice reviewed.
Comments