If you have seen the PHP2Shell headlines, you may be wondering whether your website is affected. The answer depends on what powers your site and whether the relevant security updates have been installed.
For businesses using PHP, the immediate priority is checking that the necessary security updates have been applied. Once that’s addressed, the wider question is whether your current website platform still meets your needs, particularly if maintenance is already becoming a burden.
What happened with PHP2Shell
PHP is a programming language used to run websites and applications on a server. On October 21, 2026, its maintainers released updates addressing two critical vulnerabilities known collectively as PHP2Shell. The flaws could allow attackers to run unauthorized code on affected servers without logging in.
The Wall Street Journal reported that AI tools helped researchers uncover the issue. PHP’s official advisory urges users to update immediately. If your website is affected, that doesn’t automatically mean it’s been hacked.
Which website platforms use PHP
Platforms that use PHP include:
- WordPress
- Joomla
- Drupal
- PrestaShop
- Adobe Commerce / Magento Open Source
- OpenCart
- TYPO3
- Craft CMS
- October CMS
What website owners should do now
Ask your developer or hosting provider whether your website or connected services use PHP. If they do, request confirmation that the relevant security updates have been applied, following the PHP advisory and your provider’s guidance.
Keep this separate from any decision to move platforms. A migration takes planning, and your existing website needs protection while that work happens.
How the Scaler approach reduces PHP maintenance
At Scaler Marketing, our current website development stack does not rely on PHP, so these specific flaws do not apply to the sites we build with it.
Moving away from a PHP-based website removes the need to maintain PHP for that build. For our clients, that means one fewer software dependency to manage.
We build and host Webflow websites on Webflow. For some projects, we use a separate stack with Vercel for hosting and Sanity for content management. Our team chooses and configures the right setup for your business, giving you a website that’s easier to manage and built around how your team works.
When a website migration makes sense
If your current platform creates recurring maintenance work or makes everyday content updates difficult, a migration is worth discussing. Scaler helps businesses move to Webflow or another suitable architecture, with the choice guided by their publishing needs and integrations.
For a closer look at the options, see our guide to moving from WordPress to Webflow or Next.js.
Our website migration services include content migration, URL mapping, redirects and metadata preservation, followed by launch checks and Search Console monitoring. These steps help protect the search visibility your business has earned.
Our team plans the technical move alongside how your marketing team will manage the site afterwards. The aim is a website that supports your business without carrying forward avoidable maintenance work.
Plan your next move with Scaler Marketing
Ready to explore moving away from a PHP-based website? Talk to Scaler Marketing about your website migration options and a plan that fits your business.
