PHP Vulnerability Responses by Company

Prepaid-Host

Global hosting
Aliases / services
Prepaid-Host / prepaid-host.com
Official website
https://prepaid-host.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Webhosting / Nextcloud / Root Server

Response status
Managed services patched; self-managed servers require updates
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Managed PHP, including legacy versions, is patched. Plesk reopened after its own fix on October22.

Scope: Managed-service completion does not cover self-managed servers.

What users should do

On self-managed servers, update and restart PHP-FPM, CLI and panel-embedded PHP separately; verify upload_progress is disabled.

Official service URL

Source URLs

  1. Prepaid-Host: PHP security responsehttps://prepaid-host.com/en/blog/php2shell-how-we-closed-and-verified-two-critical-php-vulnerabilitiesResponse evidence
Related official sources
  1. Prepaid-Host: PHP security responseOfficial notice

Comments