How to check and update PHP on cPanel

where PHP settings live

cPanel

newest PHP2Shell fix

8.5.12

How to see your PHP version on cPanel

1. 1MultiPHP Manager: Log in to cPanel and open MultiPHP Manager in the Software section.
2. 2MultiPHP Manager: Find your domain in the list, which shows the PHP version each domain currently uses and an Inherited label when it follows the server default.
3. 3Select PHP version (CloudLinux): Open Select PHP version on your cPanel home page, which shows the currently selected PHP version.

How to change your PHP version on cPanel

1. 1MultiPHP Manager: Log in to cPanel and open MultiPHP Manager in the Software section.
2. 2MultiPHP Manager: Select the checkbox for the domain you want to change.
3. 3MultiPHP Manager: Choose the version you want from the PHP Version menu.
4. 4MultiPHP Manager: Click Apply.
5. 5Select PHP version (CloudLinux): Open Select PHP version on your cPanel home page.
6. 6Select PHP version (CloudLinux): Choose a version from the drop-down list, which only offers the versions your host allows.
7. 7Select PHP version (CloudLinux): Click Set as current to make it the version your site uses.

Who updates PHP on cPanel?

cPanel's docs say the server administrator, usually your host, installs the PHP versions and sets the server default, and you choose from those for each domain. Ask your host whether the latest PHP security release is applied.

Good to know

• Your host can turn either tool off, so you may see MultiPHP Manager, Select PHP version, both, or neither.
• Only versions your host has installed appear in the menu. cPanel's docs say a missing version is either not installed on the server or not available to your account.
• Choosing inherit makes the domain follow the server's default PHP version, which only the server administrator can set.
• If your host offers both tools, ask which one controls your site. CloudLinux documents conditions the server must meet before its selector takes over from MultiPHP Manager.
• The Set as current label comes from CloudLinux's own description of its selector. Some hosts' versions of the page may label the button differently.
• Hosts can rename or rearrange cPanel sections, so use the search box in cPanel if a label doesn't match.

An email to send cPanel

If you can't find the version, or you want written confirmation that the fix is in, send this to their support team:

Subject: Is our PHP patched for PHP2Shell?

Hi cPanel support,

PHP released security fixes on October 21, 2026 for 2 critical flaws known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619).

Which exact PHP version does our site run on, and does it include the fix (8.2.35, 8.3.36, 8.4.27, 8.5.12 or later, or a patched package)? If not, when will it be applied?

Thanks,