PHP2Shell: check your website

We Build Websites &
AI Systems That Grow Your Business.

High-performance websites, AI automation, brand strategy, and managed IT — from Shoreditch, London.

PHP security release · 21 October 2026

PHP2Shell: is your website affected?

Two critical flaws in PHP, the language behind WordPress and most of the web, let an attacker run code on a server without logging in. Updating WordPress doesn't fix them; updating PHP on the server does.

Fixes from £195, signed off in writing. See prices

Also on 21 October: Node.js fixed ten vulnerabilities, the worst rated High. What Node.js users should do · All security releases

Severity9.2 (CVSS v4.0)
Fixed in
8.5.128.4.278.3.368.2.35
PHP 8.1 and olderNo official fix

Last verified 21 October 2026, 23:40 BST

Trusted by Businesses Across the UK

Real results. Real speed. No fluff.

15+
Projects Delivered
99+
Lighthouse Scores
10-Day
Delivery Sprints
Shoreditch
Based in London

Selected Works

A glimpse into our portfolio of high-performance digital assets.

iamchloelawless Screenshot
Personal Brand

iamchloelawless

High-end personal brand platform focusing on deep alignment.

Next.jsPremium Design
DJ's Plumbing Services Screenshot
Local Service

DJ's Plumbing Services

Lead-generation engine for an Essex & London plumber — 81 pages of local SEO built to convert.

Local SEOConversion
FolkAir Screenshot
Events Marketplace

FolkAir

Live UK events platform — 27k+ events, a real-time map, and programmatic SEO at scale.

MarketplaceReact + FastAPI

Transparent Pricing from £1,500

No hidden fees. No scope creep. Every engagement comes with clear deliverables and fixed timelines.