Get a PHP patch plan for your site in ten minutes
› Act as a careful web operations engineer. On October 21, 2026, PHP released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical remote code execution flaws (CVE-2026-109618 and CVE-2026-109619) that affect PHP versions from the last decade, even with clean application code.
My setup: [hosting type, e.g. shared host, managed WordPress, VPS, Docker, Kubernetes]
My PHP version, if known: [version or "unknown"]
My app: [WordPress, Drupal, Laravel, custom, etc.]
Who controls PHP updates: [me, my host, my agency]
Give me:
1. The exact commands or dashboard steps to confirm which PHP version is actually serving requests (not just the CLI version).
2. The fixed version I should move to, and what to do if my branch has no fix listed.
3. A step by step update plan for my setup, including a rollback step.
4. A short message I can send my host or agency asking them to confirm the update and the date it was applied.
5. What to watch in my logs for the next two weeks.
Ask me one question first if anything above is missing. Keep it practical and don't pad.
Works in any AI chat. In Magai, run it against several models at once.