By Gail Randolph, KartHost
October 23, 2026
A recent PHP security issue may have raised questions about your WordPress website. The important thing to know is that protections are in place for your KartHost-hosted WordPress website while permanent security updates continue to roll out.
What this means for you
- No action is required from you for these hosting-level updates.
- Your website may be briefly unavailable—typically about three minutes—while its PHP update is installed.
- If your website is unavailable for more than 10 minutes, log in to the KartHost Customer Center, check your open tickets, and open a ticket if one does not already exist.
- If an update finds a compatibility issue with a plugin, theme, or custom code, you will receive details through a support ticket.
What is PHP, and what happened?
PHP is software that helps run your website behind the scenes. WordPress uses PHP, but so do many other kinds of websites and web applications.
A recently disclosed PHP security issue could allow an attacker to run unauthorized code on a vulnerable server without logging in. This was not a WordPress plugin or theme issue—it affected PHP itself.
Convesio put protections in place right away while permanent security updates are rolled out across KartHost-hosted WordPress sites.
How your website is protected
Convesio is KartHost’s hosting infrastructure partner. Its team put safeguards in place first to protect hosted websites while the permanent PHP security updates are deployed.
The permanent update rollout is still in progress, but protection is already in place for your website.
Your Customer Center is protected, too
The KartHost Customer Center, where your account information is stored, is protected against these PHP vulnerabilities as well. Convesio put initial protections in place and then installed the PHP security update on the live system.
That means your KartHost Customer Center account is protected against these PHP vulnerabilities, too.
What happens during the update?
Your website may be briefly unavailable while its PHP update is installed. This typically takes about three minutes.
If your website remains unavailable for more than 10 minutes:
- Log in to your KartHost Customer Center account and check your open support tickets. A ticket may already have been opened for you.
- If no ticket exists about the issue, open a new support ticket so it can be investigated.
If a plugin, theme, or custom code causes a compatibility issue during the PHP update, a support ticket will be opened in the KartHost Customer Center. You will receive a clear explanation of what was found and any next steps.
Staying up to date
KartHost will update the Customer Center announcement when confirmation is received that the remaining PHP security updates are complete.
KartHost remains your point of contact. If you have questions, please log in to the Customer Center and open a support ticket.
Thank you for trusting KartHost with your website and your business.
