Security Alert: Critical PHP Vulnerabilities

Dear Customers

Critical vulnerabilities (php2shell, CVE-2026-109618, and CVE-2026-109619) have been disclosed in PHP that could allow an attacker to take control of a web server. These vulnerabilities affect all PHP-based e-shops, regardless of the platform or plugins used. The PPL plugin is not affected by these vulnerabilities.

We recommend that you check with your server or hosting provider immediately to verify your PHP version and update it to a patched version:

➡️ PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12 or higher

Older PHP versions (7.x, 8.0, 8.1) will no longer receive official patches. If your e-shop is running on one of these versions, we recommend upgrading to a supported version of PHP 8.2 or higher.

More information: The National Cyber and Information Security Agency