WHMCS Ltd.

WHMCS (self-managed billing and client management)

Response status

Not listed

Response information checked

2026-10-27

Current re-audit: Official sources searched; no response found · Research date: 2026-10-27

Provides hosting billing and customer management software.

PHP8.3 is supported from WHMCS8.13; PHP8.4 from9.1. Moving to9.1 requires ionCube Loader15 and upgrading WHMCS before switching PHP to8.4.

Scope: No incident-specific response was found in the checked releases, security blog and CVE searches. WHMCS9.1 availability or automatic Cloud application updates do not prove PHP runtime patch completion.

What users should do

Verify patched web and cron PHP against your installed release's compatibility requirements. For PHP8.4, prepare ionCube15, upgrade WHMCS to9.1, then change PHP; check extensions and compatibility.

Official service URL

• https://www.whmcs.com/

Source URLs

1. WHMCS 8.13 PHP supporthttps://docs.whmcs.com/releases/8-13/8-13-release-notes/Service and operation documentation
2. https://docs.whmcs.com/releases/9-1/9-1-release-notes/https://docs.whmcs.com/releases/9-1/9-1-release-notes/Service and operation documentation

WHMCS Cloud

Response status

Not listed (official sources researched)

Response information checked

2026-10-27

Current re-audit: Official sources searched; no response found · Research date: 2026-10-27

The provider manages updates, but no official Cloud completion notice for these CVEs was found.

Scope: PHP 8.4 compatibility or automatic fixes for another CVE do not establish this fix.

What users should do

Ask WHMCS support to confirm PHP patch status for your instance.

Source URLs

1. https://blog.whmcs.com/security/https://blog.whmcs.com/security/Service and operation documentation
2. https://blog.whmcs.com/133798/whmcs-91-is-now-availablehttps://blog.whmcs.com/133798/whmcs-91-is-now-availableService and operation documentation