PHP Vulnerability Responses by Company

World Host Group US Inc.

Global hosting
Aliases / services
Mochahost / mochahost.com / MochaHost / モカホスト / World Host Group US Inc.
Official website
https://mochahost.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Windows Hosting / Plesk / IIS

Response status
Plesk update completed; Windows build details unpublished
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The PHP update was declared complete October22 23:02 UTC. Guidance includes shared/managed Plesk but lacks a Windows-specific patched-build table.

Scope: Do not apply Linux CloudLinux/EasyApache verification commands to Windows.

What users should do

Ask support to confirm the installed patch and running build for your Windows/Plesk plan.

Official service URL

Source URLs

  1. https://status.mochahost.com/incident/3174https://status.mochahost.com/incident/3174Response evidence
  2. Mochahost: PHP configuration and operationhttps://mochahost.com/windows-web-hostingService and operation documentation
  3. https://status.mochahost.com/https://status.mochahost.com/Service and operation documentation
  4. https://mochahost.com/supporthttps://mochahost.com/supportService and operation documentation
  5. https://mochahost.com/bloghttps://mochahost.com/blogService and operation documentation

Shared cPanel hosting / managed cPanel servers

Response status
Managed updates complete
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Following the managed rollout covering PHP 5.2+, the update was declared complete at 23:02 UTC on October 22.

Scope: This cPanel scope is distinct from the existing Windows/Plesk/IIS card. Backports can retain a PHP version label.

What users should do

The provider performs deployment for this scope. Contact support about operational issues and request full package versions or changelogs when needed.

Source URLs

  1. https://status.mochahost.com/incident/3174https://status.mochahost.com/incident/3174Response evidence

Enhance / Control-panel hosting

Response status
PHP 7.4+ fixes installed
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

October 22 guidance explicitly states fixes are installed for PHP 7.4+ on Enhance/Control, followed by overall incident resolution.

Scope: The panel does not support older PHP branches. Do not extend this completion to Windows/Plesk or self-managed VPS.

What users should do

Check site operation and ask support about issues or uncertain fixed builds.

Source URLs

  1. https://status.mochahost.com/incident/3174https://status.mochahost.com/incident/3174Response evidence

Self-managed VPS

Response status
Customer updates required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The notice requires all vendor updates on self-managed servers. Managed-service completion does not confirm updates on customer-administered systems.

Scope: Maintenance responsibility differs from managed cPanel/Plesk and Enhance, making this a separate service scope.

What users should do

Apply vendor fixes. Check relevant package changelogs for CloudLinux, current EasyApache updates for cPanel ea-php, or consult the OS vendor for other systems.

Source URLs

  1. https://status.mochahost.com/incident/3174https://status.mochahost.com/incident/3174Response evidence
Related official sources
  1. Mochahost: PHP configuration and operationOfficial information directoryPHP operational documentation.

Comments