Get your website checked for outdated PHP versions, security gaps and signs of compromise. Nepras Technologies helps businesses patch, upgrade and maintain PHP, WordPress and Laravel websites safely.
Is your site patched?
Send us your website address. We'll reply within one business day with what we found and what, if anything, needs doing.
CVE-2026-109618 and CVE-2026-109619 let an attacker run code on a PHP server without logging in. They affect unpatched PHP going back to 5.4, whatever framework or CMS the site uses. Updating PHP and restarting it is the only real fix.
Read our plain-English guide to PHP2Shell →| Your PHP branch | Safe from |
|---|---|
| PHP 8.5 | 8.5.12 |
| PHP 8.4 | 8.4.27 |
| PHP 8.3 | 8.3.36 |
| PHP 8.2 | 8.2.35 |
| PHP 8.1, 8.0, 7.x | No fix: upgrade |
Start with the free check. We then quote in writing for whatever your site actually needs, and nothing else.
We find out which PHP version your site is really served by, whether it is on a supported branch, and whether your host has applied the latest fixes. You get a short written answer, free.
We update PHP to the patched release on your VPS, dedicated server or WHM, including every alt-php version on CloudLinux, restart PHP-FPM or Apache, and confirm the new version through the website itself.
Sites stuck on PHP 7.x, 8.0 or 8.1 get no security fixes at all. We test your site on a supported version first, fix what breaks in themes, plugins or custom code, then switch over.
We review access and error logs, look for webshells and recently changed PHP files, and check for unfamiliar processes. If we find something, we clean it up, help rotate passwords and keys, and restore from a clean backup where needed.
PHP, CMS, plugin and theme updates applied on a schedule, backups checked, and someone watching security advisories so the next urgent patch is handled before you get the warning email.
We'll review what we can, explain the findings and respond within one business day. No obligation to proceed.
Get My Free Website Security CheckHow a site gets patched depends on where it is hosted. We handle all the common set-ups, and on shared hosting we'll tell you honestly when the fix is your host's job.
No work starts and nothing is charged until you have approved a written quote.
You send your website address. We check what we can from outside and tell you where your site stands.
If work is needed, you get a fixed, itemised quote. If your host should fix it for free, we tell you that instead.
Access is arranged securely, never by email or web form, and we take a full backup before touching anything.
We patch, upgrade or clean up, restart what needs restarting, and test the site's key pages and forms.
You get a short written report: what we found, what we changed, and anything still to watch.
On shared hosting, patching PHP is your host's job. If that's your situation, we'll say so and give you the message to send them, rather than sell you work you don't need.
A full backup is taken before any update, upgrade or cleanup, so every change we make can be undone.
A PHP upgrade that breaks checkout is not a fix. We test the site on the new version before switching, and check key pages and forms afterwards.
No one can promise a server was never touched. We tell you exactly what we looked at, what we found, and how confident we are.
