How to check and update PHP on Bluehost

where PHP settings live

Bluehost Portal

newest PHP2Shell fix

8.5.12

How to see your PHP version on Bluehost

1. 1Bluehost Portal: Log in, click Websites in the left-hand menu, and click Manage Site next to the website.
2. 2Bluehost Portal: Go to the Advanced tab and click the VIEW PHP VERSION INFO link in the PHP Version card.
3. 3cPanel: In the Bluehost Portal, click Hosting, then My Plans, then the cPanel button.
4. 4cPanel: Scroll to Software and click MultiPHP Manager to see a list of domains with their current PHP version.
5. 5Agency Hosting: In the Bluehost Portal, click Websites, click Manage Site, and view your current PHP version under the Overview tab.

How to change your PHP version on Bluehost

1. 1Bluehost Portal: Log in to your Bluehost Portal and click Websites in the left-hand menu.
2. 2Bluehost Portal: Click the Manage Site button next to the website you want to manage.
3. 3Bluehost Portal: Go to the Advanced tab and, within the PHP Version tile, click the Change Version button.
4. 4Bluehost Portal: Select a PHP version from the drop-down and click Apply.
5. 5cPanel: In the Bluehost Portal, click Hosting, then My Plans, then the cPanel button.
6. 6cPanel: Scroll down to Software and click MultiPHP Manager.
7. 7cPanel: Select the domains you need to update and click the PHP Version drop-down on the top right.
8. 8cPanel: Choose the PHP version that is compatible with your website and click Apply.
9. 9Agency Hosting: In the Bluehost Portal, click Websites, then Manage Site next to the website.
10. 10Agency Hosting: Go to the Settings tab, find the PHP Version section, and click Change PHP Version.
11. 11Agency Hosting: Select the version you want and click Apply.

Who updates PHP on Bluehost?

On Bluehost, you choose the PHP version and Bluehost provides the builds. Ask Bluehost whether the latest PHP security release is applied.

Good to know

• Bluehost's own articles list different minimum and deprecated PHP versions, so trust the list your account shows.
• Bluehost also documents setting PHP with a handler line in your .htaccess file. The Portal or cPanel is simpler and easier to undo.
• VPS and dedicated servers are managed differently. Check with Bluehost for those plans.

An email to send Bluehost

If you can't find the version, or you want written confirmation that the fix is in, send this to their support team:

Subject: Is our PHP patched for PHP2Shell?

Hi Bluehost support,

PHP released security fixes on October 21, 2026 for 2 critical flaws known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619).

Which exact PHP version does our site run on, and does it include the fix (8.2.35, 8.3.36, 8.4.27, 8.5.12 or later, or a patched package)? If not, when will it be applied?

Thanks,