PHP Vulnerability Responses by Company

SiteHost

Global hosting
Aliases / services
SiteHost / sitehost.nz
Official website
https://sitehost.nz/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

SiteHost Cloud Containers (official PHP 5.6+ images)

Response status
Managed and unmanaged updates reported complete
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

After managed updates, SiteHost reported completion of unmanaged Cloud Container image updates on October 27. Custom images still require customer updates.

Scope: The conditional issue has additional session.upload_progress.enabled=0 guidance. PHP 5.2–5.5 mitigations and Plesk/cPanel servers are separate. Check OS/OpenSSL changes in older image updates.

What users should do

Verify active images and site operation; rebuild custom images on patched bases. Check additional guidance if configuration uses php_binary/php_serialize and code switches to php at runtime.

Official service URL

Source URLs

  1. SiteHost: PHP vulnerability responsehttps://sitehost.nz/blog/backported-patches-cloud-containers-unsupported-phpResponse evidence
  2. https://www.sitehost-status.net/incidents/qtfv40rc7395https://www.sitehost-status.net/incidents/qtfv40rc7395Service and operation documentation
  3. https://sitehost.nz/bloghttps://sitehost.nz/blogService and operation documentation

SiteHost Cloud Containers — PHP 5.2–5.5

Response status
Mitigation guidance
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Recommended mitigations were applied except to custom images; these are not a complete fix.

Scope: Applies only to this service scope.

What users should do

Test uploads and migrate promptly to supported PHP.

Source URLs

  1. https://www.sitehost-status.net/incidents/qtfv40rc7395https://www.sitehost-status.net/incidents/qtfv40rc7395Response evidence

SiteHost Managed cPanel Servers

Response status
PHP patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

All installed PHP versions were reported patched on October 22 at 11:37 NZDT.

Scope: Applies only to this service scope.

What users should do

Check sites and plan migration from old PHP to supported versions.

Source URLs

  1. https://www.sitehost-status.net/incidents/qtfv40rc7395https://www.sitehost-status.net/incidents/qtfv40rc7395Response evidence

SiteHost Managed Plesk Servers

Response status
Partially patched / conditional
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

PHP 8.2+ is updated; PHP 8.1 and older received mitigations rather than a complete fix.

Scope: Applies only to this service scope.

What users should do

Migrate PHP 8.1 or older to a compatible supported version and test uploads.

Source URLs

  1. https://www.sitehost-status.net/incidents/qtfv40rc7395https://www.sitehost-status.net/incidents/qtfv40rc7395Response evidence
Related official sources
  1. SiteHost: PHP vulnerability responseOfficial noticeOfficial incident notice reviewed.

Comments