How to check and update PHP on Plesk

where PHP settings live

Plesk

newest PHP2Shell fix

8.5.12

How to see your PHP version on Plesk

1. 1Log in to Plesk.
2. 2Go to Websites & Domains.
3. 3Look next to the PHP icon on the domain card, where Plesk shows the currently selected PHP version.
4. 4For full detail, click PHP for the domain and then click View the phpinfo() page.

How to change your PHP version on Plesk

1. 1Log in to Plesk.
2. 2Go to Websites & Domains, find the domain whose PHP version you want to change, and then click PHP.
3. 3Select the PHP support checkbox if it is clear.
4. 4Select the PHP version you want from the drop-down menu.
5. 5Select the handler type you want from the drop-down menu.
6. 6Click OK.

Who updates PHP on Plesk?

Plesk's docs say your hosting provider decides which PHP versions appear in the menu and which PHP settings your subscription lets you manage. Ask your host whether the latest PHP security release is applied.

Good to know

• If no version shows next to the PHP icon, PHP is not turned on for that domain.
• Depending on your subscription, you may be able to manage only some PHP settings, or none. Plesk says to contact your hosting provider in that case, or if the version you want is missing from the menu.
• Domains inherit PHP settings from their subscription, and subdomains inherit from their parent domain, until you change them.
• Which handlers you can pick depends on the PHP version and the server's operating system.
• Plesk warns that PHP versions are not 100% compatible, so check your site after switching.
• These steps are from the Plesk Obsidian docs. Hosts can customize Plesk, so labels may differ.

An email to send Plesk

If you can't find the version, or you want written confirmation that the fix is in, send this to their support team:

Subject: Is our PHP patched for PHP2Shell?

Hi Plesk support,

PHP released security fixes on October 21, 2026 for 2 critical flaws known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619).

Which exact PHP version does our site run on, and does it include the fix (8.2.35, 8.3.36, 8.4.27, 8.5.12 or later, or a patched package)? If not, when will it be applied?

Thanks,