Hostinger sets 1 PHP version for the whole hosting plan, on the PHP Configuration page of a website's dashboard in hPanel. For PHP2Shell, see which version your site runs in hPanel (steps below), then ask Hostinger to confirm the fixed release (8.2.35, 8.3.36, 8.4.27, 8.5.12) or a patched package is applied.
- where PHP settings live
- hPanel
- newest PHP2Shell fix
- 8.5.12
How to see your PHP version on Hostinger
- Go to the Websites section and click Dashboard next to the website.
- Search for PHP Info in the sidebar and click it.
- Your current PHP version is shown at the top of the page.
How to change your PHP version on Hostinger
- Go to the Websites section and click Dashboard next to the website.
- Open PHP Configuration from the sidebar.
- Select the PHP version you want and click Update.
- Wait a couple of minutes, then check the PHP version again to confirm the change.
Who updates PHP on Hostinger?
On Hostinger, you choose the PHP version and Hostinger provides the builds; Hostinger says it removed versions that no longer get official security updates. Ask Hostinger whether the latest PHP security release is applied.
Good to know
- The version you pick applies to every website on the hosting plan, except websites built with Hostinger AI Builder.
- As of Hostinger's October 2026 article, you can pick PHP 8.2 up to 8.5, and 8.3 is the default.
- Hostinger documents an .htaccess method for a different version in 1 folder or subdomain, and for temporarily using an older version. It says this method skips your PHP extensions and options, so it may affect how the site works.
- Running php -v over SSH shows the hosting plan's version, not a folder's or subdomain's.
An email to send Hostinger
If you can't find the version, or you want written confirmation that the fix is in, send this to their support team:
Subject: Is our PHP patched for PHP2Shell? Hi Hostinger support, PHP released security fixes on October 21, 2026 for 2 critical flaws known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Which exact PHP version does our site run on, and does it include the fix (8.2.35, 8.3.36, 8.4.27, 8.5.12 or later, or a patched package)? If not, when will it be applied? Thanks,
Questions people ask
Has Hostinger patched PHP2Shell?
We don't know, and we don't guess: ask Hostinger with the email above. PHP's fixed releases are 8.2.35, 8.3.36, 8.4.27, 8.5.12.
How do I update PHP on Hostinger?
Go to the Websites section and click Dashboard next to the website. The full steps are above, from Hostinger's own help pages.
Which PHP version should I pick on Hostinger?
The newest one your platform, theme and plugins support. For most WordPress sites that's PHP 8.3 or newer; test on a staging copy first if your host offers one.
Sources
- Hostinger: How to change the PHP version of your Hostinger hosting plan
- Hostinger: How to check the PHP version in Hostinger
- PHP: security release announcement, October 21, 2026
Checked against these sources on October 22, 2026. PHP Scanner is a free tool from Catch Digital and is not affiliated with the PHP project.