PHP Vulnerability Responses by Company

Zoner

Global hosting
Aliases / services
Zoner / zoner.fi
Official website
https://www.zoner.fi/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Webhotelli shared web hosting

Response status
Hosted services patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

By October 22 at 13:47, PHP fixes were complete across DirectAdmin, cPanel, ZonerHome and new S–XXL hosting, including older branches where offered. Existing PHP branches were retained.

Scope: WP.one and self-managedVPS are separate scopes. Control panel variants are not separate companies.

What users should do

No customer action is needed to receive the server fix. Check your site; back up and test compatibility before moving from an older PHP branch.

Official service URL

Source URLs

  1. Zoner: PHP vulnerability responsehttps://www.zoner.fi/tietoturva/php-tietoturva-haavoittuvuus/Response evidence
  2. https://tuki.zoner.fi/hc/fi/articles/52156599243409-Tuleva-kriittinen-PHP-p%C3%A4ivitys-tietoturvasyist%C3%A4-P%C3%A4ivitykset-suoritettuhttps://tuki.zoner.fi/hc/fi/articles/52156599243409-Tuleva-kriittinen-PHP-p%C3%A4ivitys-tietoturvasyist%C3%A4-P%C3%A4ivitykset-suoritettuResponse evidence

WP.one

Response status
PHP 8.1 and later patched
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October 22 service table confirms WP.one PHP 8.1 and later patched while retaining the site's existing PHP branch.

Scope: WP.one scope only; separate from Webhotelli and self-managedVPS.

What users should do

No action is needed to receive the PHP fix. Check the site and test compatibility before an optional branch change.

Source URLs

  1. Zoner: PHP vulnerability responsehttps://www.zoner.fi/tietoturva/php-tietoturva-haavoittuvuus/Response evidence
  2. https://tuki.zoner.fi/hc/fi/articles/52156599243409-Tuleva-kriittinen-PHP-p%C3%A4ivitys-tietoturvasyist%C3%A4-P%C3%A4ivitykset-suoritettuhttps://tuki.zoner.fi/hc/fi/articles/52156599243409-Tuleva-kriittinen-PHP-p%C3%A4ivitys-tietoturvasyist%C3%A4-P%C3%A4ivitykset-suoritettuResponse evidence

Self-managedVPS

Response status
Customer PHP update required
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The notice explicitly says Zoner has not updated PHP on self-managed virtual servers. Customers must install a fixed release or vendor-patched OS package.

Scope: Shared hosting and WP.one remediation does not cover self-managed software.

What users should do

Install PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12 or later, or a patched OS package. Check PHP bundled with panels and applications too.

Source URLs

  1. Zoner: PHP vulnerability responsehttps://www.zoner.fi/tietoturva/php-tietoturva-haavoittuvuus/Response evidence
  2. https://tuki.zoner.fi/hc/fi/articles/52156599243409-Tuleva-kriittinen-PHP-p%C3%A4ivitys-tietoturvasyist%C3%A4-P%C3%A4ivitykset-suoritettuhttps://tuki.zoner.fi/hc/fi/articles/52156599243409-Tuleva-kriittinen-PHP-p%C3%A4ivitys-tietoturvasyist%C3%A4-P%C3%A4ivitykset-suoritettuResponse evidence
Related official sources
  1. Zoner: PHP vulnerability responseOfficial notice

Comments