HostGator shared hosting gives you 2 places to set PHP: the Customer Portal and cPanel's MultiPHP Manager. For PHP2Shell, see which version your site runs in Customer Portal (steps below), then ask HostGator to confirm the fixed release (8.2.35, 8.3.36, 8.4.27, 8.5.12) or a patched package is applied.
- where PHP settings live
- Customer Portal
- newest PHP2Shell fix
- 8.5.12
How to see your PHP version on HostGator
- Log in to your Customer Portal and go to Websites from the left navigation menu.
- Click Manage Site next to the website you want to check.
- Click the Advanced tab, where the PHP Version card shows your website's current PHP version.
- For full detail, click View PHP Version Info.
How to change your PHP version on HostGator
- Customer Portal: Log in to your Customer Portal and go to Websites from the left navigation menu.
- Customer Portal: Click Manage Site next to the website you want to manage.
- Customer Portal: Click the Advanced tab.
- Customer Portal: Find the PHP Version section and click the Change PHP Version button.
- Customer Portal: Select the PHP version from the dropdown and click Apply.
- cPanel: Log in to cPanel and click MultiPHP Manager under the Software section.
- cPanel: Select the domain you want to manage.
- cPanel: Select the PHP version from the dropdown, then click Apply.
Who updates PHP on HostGator?
On HostGator, you choose the PHP version and HostGator provides the builds. Ask HostGator whether the latest PHP security release is applied.
Good to know
- HostGator shows a notification once the change succeeds.
- HostGator's article says the minimum PHP version on its shared servers is 8.1. The article is undated, so trust the list your account shows.
- HostGator recommends making your site compatible with the newest PHP version available in your account.
An email to send HostGator
If you can't find the version, or you want written confirmation that the fix is in, send this to their support team:
Subject: Is our PHP patched for PHP2Shell? Hi HostGator support, PHP released security fixes on October 21, 2026 for 2 critical flaws known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Which exact PHP version does our site run on, and does it include the fix (8.2.35, 8.3.36, 8.4.27, 8.5.12 or later, or a patched package)? If not, when will it be applied? Thanks,
Questions people ask
Has HostGator patched PHP2Shell?
We don't know, and we don't guess: ask HostGator with the email above. PHP's fixed releases are 8.2.35, 8.3.36, 8.4.27, 8.5.12.
How do I update PHP on HostGator?
Customer Portal: Log in to your Customer Portal and go to Websites from the left navigation menu. The full steps are above, from HostGator's own help pages.
Which PHP version should I pick on HostGator?
The newest one your platform, theme and plugins support. For most WordPress sites that's PHP 8.3 or newer; test on a staging copy first if your host offers one.
Sources
- HostGator: How Do I Update the PHP Version on My Site
- HostGator: How to Check PHP Version and Info via Customer Portal or cPanel
- PHP: security release announcement, October 21, 2026
Checked against these sources on October 22, 2026. PHP Scanner is a free tool from Catch Digital and is not affiliated with the PHP project.