MODX
- Aliases / services
- MODX Revolution / モドエックス / MODX
- Official website
- https://modx.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
MODX Revolution (self-managed / external host)
- Response status
- PHP update required from operator or host
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Provider of a PHP CMS and hosting.
The official MODX community announcement requires PHP fixes for both CVEs; updating MODX itself is insufficient.
Scope: MODX Cloud completion is separate. The old requirements page could not be fetched, so its version requirements were not revalidated.
What users should do
Ask the host to confirm patched PHP and restarted processes. A WAF does not replace patching; validate compatibility before changing PHP.
Official service URL
Source URLs
- https://community.modx.com/t/critical-php-vulnerabilities-upgrade-immediately/9312https://community.modx.com/t/critical-php-vulnerabilities-upgrade-immediately/9312Response evidence
MODX Cloud
- Response status
- All offered PHP versions patched
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
The21October official announcement reports every MODX Cloud PHP version patched, including long-term-supported7.4,8.0 and8.1.
Scope: Applies to MODX Cloud only, not MODX on external hosts.
What users should do
No immediate patch action is stated for Cloud customers. Test compatibility before separately moving to newer PHP.
Source URLs
- https://community.modx.com/t/critical-php-vulnerabilities-upgrade-immediately/9312https://community.modx.com/t/critical-php-vulnerabilities-upgrade-immediately/9312Response evidence
Related official sources
- MODX 3 server requirementsOfficial information directory
Comments