Skip to content 
You don’t need to do anything. We are handling this security update for the Dentli Platform and every website we host, and we will contact you directly if anything affects your site.
What happened
On 21 October 2026, the PHP project released urgent fixes for two serious security flaws, known as “PHP2Shell”. PHP is the technology that runs WordPress and most websites on the internet. The flaws could let an attacker take control of a web server without logging in, so hosting providers worldwide are installing the fixes as a priority.
The problem is in PHP itself, not in your website, WordPress or your plugins. That means it is fixed on the server, not by changes to your site.
How your website is protected
Most of our client websites run on Pressable, our managed WordPress hosting platform. Pressable worked with the PHP security team before the flaws were made public, and those websites were protected from the start.
Websites still on our previous hosting provider, Hosting.com, are receiving the fix as part of a rollout across all of Hosting.com’s servers. We are checking each of these servers ourselves to confirm the fix is in place.
The Dentli Platform
The Dentli Platform and the software we provide with it also run on PHP. We have already updated them to the fixed version of PHP, so they are protected and working as normal.
What we are doing
- Confirming that every server hosting a client website runs the fixed version of PHP
- Reviewing websites for any signs of unusual activity
- Speeding up the move of remaining websites to Pressable
- Updating older websites to the latest supported PHP versions
Do you need to do anything?
No. There is nothing to install or change on your side. As a general good habit, we always recommend using a strong, unique password for your website login.
If you have questions, contact us at support@dentli.io
