When website security makes the headlines, you need clear answers. What does it mean for your business, who is handling the updates, and is there anything you need to do?
At Outrank, we want you to understand what’s happening behind the scenes, without having to get lost in technical terminology. Here’s what the latest PHP security updates mean for your website, what our hosting partner has done, and how we can support your ongoing website maintenance.
What has happened with PHP security?
PHP is a programming language used to run websites, including those built on WordPress. It works behind the scenes on your hosting server, rather than being something your customers see when they visit your website. This means an issue with PHP needs attention at the hosting level, not just within your website’s dashboard.
On 21 October 2026, the PHP development team released security updates addressing two critical vulnerabilities. These weaknesses could allow attackers to run unauthorised code on affected servers, which is why applying the fixes promptly is important. The announcement does not automatically mean your website has been compromised, but it does mean the software running it needs the appropriate security patches.
What has our hosting partner done?
Our hosting partner, 20i, has confirmed that its security rollout is complete. In its update on 21 October 2026, it confirmed that all PHP versions across its platforms had been patched against the newly disclosed vulnerabilities. This included backported fixes, which apply the relevant security changes to older PHP versions.
For customers on our managed hosting, these updates have been handled at the server level, so you do not need to install them yourself. These particular hosting security fixes are also separate from SiteShield and do not depend on you adding a website maintenance service.
That distinction matters. Addressing the PHP vulnerabilities is one part of looking after your website, while maintaining the software within your website is another.
Why does your website still need regular maintenance?
Your hosting environment and your website’s own software have different maintenance needs. Updating the server does not automatically update WordPress, your theme or your plugins. Equally, updating a plugin does not replace a security fix needed on the server. Both need attention as part of a wider approach to reducing risk.
WordPress and its plugins receive updates that can address known vulnerabilities, fix problems and support compatibility. Leaving software outdated can leave issues unresolved, even when your hosting provider is maintaining the underlying infrastructure. Regular maintenance helps you keep on top of those changes rather than allowing outstanding updates to accumulate.
For a busy business owner, the challenge is often knowing who is responsible. You may have someone managing your hosting, someone else who built the website, and no clear arrangement for its ongoing upkeep. We believe those responsibilities should be clear, so important tasks do not fall between the gaps.
How does Outrank SiteShield help?
Outrank SiteShield complements your hosting security updates, rather than replacing them. We take care of weekly website and plugin updates, alongside malware scanning, helping remove the uncertainty around your website’s ongoing maintenance.
It means you can focus on running your business without adding another task to your list. Instead of wondering when your plugins were last updated or whether your website is being checked for potential issues, you have an agreed maintenance service in place.
You’ll also receive a monthly report detailing the work carried out. This keeps you informed and gives you a clearer picture of how your website is being looked after, without needing to manage the technical tasks yourself.
Please note: Updating plugins cannot guarantee complete website security. However, regular updates and ongoing maintenance help address known vulnerabilities and reduce the risk of security issues.
SiteShield is about taking a practical, ongoing approach to website care. Speak to your account manager to find out more about adding it to your existing services.
Is it time to give your website a fresh start?
The latest PHP security alert does not automatically mean you need a new website. The immediate vulnerabilities require the relevant server-level fixes, rather than a redesign. However, this is a sensible opportunity to consider whether your current website is becoming harder to maintain or no longer meets your business’s needs.
Perhaps it feels slow, is difficult to use on a mobile, or makes even small changes unnecessarily complicated. Your services may have changed, while your website still presents an older version of your business. A review can help you decide whether targeted improvements and regular maintenance are enough, or whether a replacement would be the better long-term option.
Where a rebuild makes sense, our focus is on more than a different website design. We would look at the technology behind your website, how customers move through it, how clearly it communicates your services, and how easily visitors can make an inquiry or purchase.
Search visibility should be part of that planning too. Accessible content, clear internal links and sound technical foundations remain relevant to both traditional Google Search and its AI-powered features. A new website alone does not guarantee better rankings or AI visibility, but a considered approach gives you the opportunity to address weaknesses in the existing site.
Website support, seven days a week
Have a question about your website’s security, SiteShield or what these updates mean for your business? We’ve extended our customer service hours, so you can now reach our support line from 8am to 8pm, seven days a week.
If our core team is unavailable, our service team will log your enquiry and pass it directly to the relevant department for follow-up. Whether you need advice on ongoing maintenance or would like to discuss a website review, you have a clear way to get your inquiry to the right people.
What should you do next?
For customers on our managed hosting, the specific PHP security patches have been handled through our hosting partner. The next step is to make sure you understand what ongoing maintenance your website has in place and who is responsible for it.
You do not need to work that out alone. We can talk you through your existing services, explain how SiteShield fits alongside your hosting, and help you decide whether your website would benefit from a wider review.
Your website should be helping you win business, not becoming another thing to worry about. Speak to your account manager or get in touch with our team to add SiteShield or arrange a website review.