DreamHost PHP Version: How to Check and Update

Short answer

DreamHost sets PHP per site in its panel, on the PHP Settings page you reach from Manage Websites. DreamPress sites are changed in the panel too. For PHP2Shell, see which version your site runs in DreamHost panel (steps below), then ask DreamHost to confirm the fixed release (8.2.35, 8.3.36, 8.4.27, 8.5.12) or a patched package is applied.

where PHP settings live: DreamHost panel
newest PHP2Shell fix: 8.5.12

How to see your PHP version on DreamHost

Navigate to the Manage Websites page in the panel.
Switch to List view, where the PHP column shows the version each active site uses.
DreamPress: Click Manage next to the site, select the WordPress tab, and find the PHP version under the WordPress section.

How to change your PHP version on DreamHost

Navigate to the Manage Websites page.
Click the Manage button for your site to open Website settings.
Click the Settings tab.
In the Website Settings section, click the Manage button next to PHP.
On the PHP Settings page, scroll down to the PHP Version section and choose a version from the dropdown menu.
Click the Change PHP Version button.
Choose Revert to previous PHP version (DreamHost's recommendation) or Change PHP version anyway! to decide what happens if the upgrade fails.
Click the Change PHP Version button again and wait for the success message, which DreamHost says takes less than 5 minutes.

Choosing a version line (like 8.3) is not the same as getting its fixed release (8.3.36 for PHP2Shell). The host provides the release; ask them to confirm it.

Who updates PHP on DreamHost?

DreamHost lets you choose each site's PHP version and says you are responsible for keeping your own code compatible with current PHP releases. Ask DreamHost whether the latest PHP security release is applied.

Good to know

Your domain must be Fully Hosted. DNS Only, Parked and Redirect domains have no PHP options.
On Managed VPS running Nginx, PHP is set for the whole server on the Server & Users dashboard page instead.
The dropdown includes end-of-life PHP versions. Picking one may add PHP Extended Support charges to your account.
DreamHost also documents forcing a version with lines in an .htaccess file, but warns against relying on it long term.

An email to send DreamHost

If you can't find the version, or you want written confirmation that the fix is in, send this to their support team:

Subject: Is our PHP patched for PHP2Shell?

Hi DreamHost support,

PHP released security fixes on October 21, 2026 for 2 critical flaws known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619).

Which exact PHP version does our site run on, and does it include the fix (8.2.35, 8.3.36, 8.4.27, 8.5.12 or later, or a patched package)? If not, when will it be applied?

Thanks,

Questions people ask

Has DreamHost patched PHP2Shell?

We don't know, and we don't guess: ask DreamHost with the email above. PHP's fixed releases are 8.2.35, 8.3.36, 8.4.27, 8.5.12.

How do I update PHP on DreamHost?

Navigate to the Manage Websites page. The full steps are above, from DreamHost's own help pages.

Which PHP version should I pick on DreamHost?

The newest one your platform, theme and plugins support. For most WordPress sites that's PHP 8.3 or newer; test on a staging copy first if your host offers one.

Sources

Checked against these sources on October 22, 2026. PHP Scanner is a free tool from Catch Digital and is not affiliated with the PHP project.