Net Oak

Frames CMS (free and paid editions)

Response status

No CMS change for these CVEs; update hosting PHP

Response information checked

2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Frames CMS and website template developer.

The 22 October notice says Frames CMS itself needs no change for these PHP vulnerabilities and confirms PHP 8.3 compatibility. Hosting PHP still requires a corrected release.

Scope: Distinguish free/paid CMS code from hosting PHP. The separate 25 October session and database security-hardening update is not negated by the statement about these CVEs.

What users should do

Use the hosting provider's corrected release for the relevant branch, such as PHP 8.3.36, 8.4.27 or 8.5.12 or later, and check compatibility of other PHP programs.

Official service URL

• https://frames-cms.com/

Source URLs

1. PHP upgrade guidance for Frames CMS usershttps://frames-cms.com/update/20261022_php.htmlResponse evidence
2. https://frames-cms.com/update.htmlhttps://frames-cms.com/update.htmlService and operation documentation