Cloudways runs your sites on a cloud server you manage through the Cloudways Platform. PHP can be set for each application, or for the whole server on servers without that option. For PHP2Shell, see which version your site runs in Cloudways Platform (steps below), then ask Cloudways to confirm the fixed release (8.2.35, 8.3.36, 8.4.27, 8.5.12) or a patched package is applied.
- where PHP settings live
- Cloudways Platform
- newest PHP2Shell fix
- 8.5.12
How to see your PHP version on Cloudways
- Log in to the Cloudways Platform, click Flexible in the left-side menu, and open the Applications tab.
- Select your application, then click Application Settings in the left-side application menu.
- Click the PHP Settings tab to see the current PHP version selected for the application.
How to change your PHP version on Cloudways
- Log in to the Cloudways Platform, click Flexible in the left-side menu, and open the Applications tab.
- Select the application you want to change.
- Click Application Settings in the left-side application menu.
- Click the PHP Settings tab.
- Under PHP Version, click the edit icon next to the current PHP version.
- In the Update PHP Version popup, select the version from the PHP Version dropdown.
- Click Proceed and wait for the success notification.
Who updates PHP on Cloudways?
On Cloudways, you choose the PHP version for each application or server and Cloudways provides the builds. Ask Cloudways whether the latest PHP security release is applied.
Good to know
- Per-application PHP was in Public Preview as of Cloudways' September 2026 article. Cloudways said it would come first to servers launched from 8 August 2026, with existing servers to follow.
- If your application has no PHP Settings tab, Cloudways' server guide says the PHP version is updated under the server's Settings & Packages, on the Packages tab.
- Changing the server-level PHP version does not change applications that already have their own PHP version.
- The change restarts the application's PHP service, which can cause a few seconds of backend downtime.
- Cloudways recommends at least 4 GB of RAM when applications on 1 server run different PHP versions, and a backup or staging test before switching.
- Cloudways' 2 articles describe the server menu differently, so labels may not match exactly.
An email to send Cloudways
If you can't find the version, or you want written confirmation that the fix is in, send this to their support team:
Subject: Is our PHP patched for PHP2Shell? Hi Cloudways support, PHP released security fixes on October 21, 2026 for 2 critical flaws known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Which exact PHP version does our site run on, and does it include the fix (8.2.35, 8.3.36, 8.4.27, 8.5.12 or later, or a patched package)? If not, when will it be applied? Thanks,
Questions people ask
Has Cloudways patched PHP2Shell?
We don't know, and we don't guess: ask Cloudways with the email above. PHP's fixed releases are 8.2.35, 8.3.36, 8.4.27, 8.5.12.
How do I update PHP on Cloudways?
Log in to the Cloudways Platform, click Flexible in the left-side menu, and open the Applications tab. The full steps are above, from Cloudways's own help pages.
Which PHP version should I pick on Cloudways?
The newest one your platform, theme and plugins support. For most WordPress sites that's PHP 8.3 or newer; test on a staging copy first if your host offers one.
Sources
- Cloudways: How to Change the PHP Version for a Specific Application
- Cloudways: How to Manage Your Server Settings
- PHP: security release announcement, October 21, 2026
Checked against these sources on October 22, 2026. PHP Scanner is a free tool from Catch Digital and is not affiliated with the PHP project.