Levamo

WordPress cloud environments

Response status

Mitigation applied; updates planned

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October 21 notice describes upload-progress disabling and WAF mitigation. PHP 8.2–8.5 validation/deployment and 8.0/8.1 backports are planned; no completion follow-up was found.

Scope: Mitigation is not a full fix. Formerly Rapyd Cloud, the same service.

What users should do

Check provider deployment/completion notices for 8.2+. For 8.0/8.1, discuss upgrading with support and test all sites sharing the environment.

Official service URL

• https://levamo.com/

Source URLs

1. https://levamo.com/blog/critical-php-vulnerability-php2shell/https://levamo.com/blog/critical-php-vulnerability-php2shell/Response evidence
2. https://levamo.com/blog/https://levamo.com/blog/Service and operation documentation
3. https://status.levamo.com/https://status.levamo.com/Service and operation documentation
4. Sites and environmentshttps://support.levamo.com/en/articles/11194212-overview-of-sites-and-environments-on-levamoService and operation documentation
5. PHP version managementhttps://support.levamo.com/en/articles/8463661-introduction-to-php-version-management-on-levamo-dashboardService and operation documentation
6. Rapyd Cloud is now Levamohttps://levamo.com/blog/rapyd-cloud-is-now-levamo/Service and operation documentation