How to update PHP on your host.

Last updated: 21 Oct 2026

Most guides to updating PHP assume you have a developer and a command line. Most business websites don't. They sit on shared or managed hosting, and the PHP version is a dropdown in a control panel. This guide gives you the exact steps for the hosts I come across most, checked against each provider's own help pages in October 2026.

Why now: the PHP2Shell vulnerabilities patched on 21 October 2026 affect almost every PHP version in use. Sites on PHP 8.1 or older get no official release, only source-level backports that a host would have to build itself, so many owners will need to move up a version. Sites on supported versions need their host's patched build.

Before you touch anything

1. Take a full backup of your files and database, and make sure you can get it back. Most hosts have a backup tool in the control panel.
2. Note your current version, so you can switch back if something breaks.
3. Update WordPress, your theme and your plugins first, while you're still on the old PHP version. A lot of compatibility problems are already fixed in newer plugin releases.
4. Use a staging copy if your host offers one. Change PHP there first and test before you change the live site.

Which version to choose: 8.3 or 8.4 for most sites. Avoid 8.2 as a destination, because its security support ends on 31 December 2026. Only pick 8.5 if your theme and key plugins say they support it.

cPanel (most shared hosting)

Go to Software, then MultiPHP Manager. Tick the domain, pick the version from the PHP Version dropdown and click Apply. You can only choose from versions your host has installed. If a domain says "inherit", it's using the server's default rather than a version you've chosen.

Some cPanel hosts run CloudLinux, where the option is called Select PHP Version under Software instead. Pick the version and click Apply. CloudLinux published a PHP2Shell notice on 21 October and was rolling out patched builds of its alt-php versions, so ask your host whether your build includes the fix.

Plesk

Go to Websites & Domains (just Domains in some views), choose your domain, then PHP Settings. Choose the version (and handler, if offered) and apply. If you can't see the option, your hosting provider controls it and you'll need to ask them.

SiteGround

In Site Tools, go to Devs, then PHP Manager, and click the pencil icon to change the version. SiteGround's "Managed PHP" setting is on by default and moves your site up automatically over time. If you choose a version manually, those automatic updates stop, so only do that if you have a reason. Subdomains and staging sites are set separately.

GoDaddy

cPanel Web Hosting: go to Products, then Web Hosting, then Manage. Open the Settings tab, find Server Settings, click "Change" next to PHP Version, choose the version, then Continue and Save Changes.

Managed WordPress: go to Products, then Managed Hosting for WordPress, then Manage All. Open the site menu, then Settings, then Production Site, click "Change" next to PHP version and save.

Hostinger

In hPanel, go to Websites, open the dashboard for your site, then PHP Configuration. Choose the version and click Update. Two things to know: the change applies to every website on the plan, not just one, and the panel only offers PHP 8.2 or newer.

Bluehost

In the Bluehost portal, go to Websites, then Manage Site, open the Settings or Advanced tab (Bluehost's own guides show both) and find PHP Version. Click Change PHP Version, choose and apply. Bluehost lists 7.3 to 8.1 as deprecated. If your account looks different, it may be an older cPanel-based plan, in which case follow the cPanel steps above.

Afrihost

Log in to ClientZone, open the Hosting tab, choose Shared Hosting and your domain, then log into Website Manager.

• On cPanel accounts: Software, then MultiPHP Manager. Tick the domain, choose the version and click Apply.
• On CWP accounts: CWP Settings, then Php Selector. Choose the domain and version, then Update Version and Apply.

xneelo

xneelo Control Panel: go to Web Hosting, choose your domain, then Hosting tools, then PHP Config. On the Configuration tab click Edit, choose the version and Save. You can switch back the same way while the old version is still available. xneelo removes old versions once Debian stops supporting them.

konsoleH: go to Hosting Services, choose your domain, then Manage Services, Configuration and PHP Config. Pick the version from the dropdown and Save.

Domains.co.za

Go to Manage Services, then Web Hosting, then Manage, and log into the control panel. Under Software choose Select PHP Version, pick the version and click Apply.

WP Engine

In the User Portal, go to Sites, choose the environment, and find PHP in the Updates section. Click the version number, choose a new one and confirm. WP Engine only offers the versions it supports, and when a version reaches end of life it moves every site on it automatically. It emails technical contacts first, so make sure someone actually reads those emails. In October 2026 WP Engine listed 7.4, 8.2 and 8.4, with 8.4 marked as beta, so check its PHP guide before you switch.

Kinsta

In MyKinsta, go to Sites, choose the site, then Tools and PHP settings, and click Change. You can update several sites at once from the Sites list using Actions. Automatic PHP updates are on by default. Choosing a long-term support version turns them off.

Your own VPS or cloud server

If your site runs on a server you or your developer manage (DigitalOcean, AWS, Hetzner, a local data centre), there's no dropdown. PHP is updated through the operating system's packages, or by installing a newer version alongside the old one and switching the web server over. Restart PHP-FPM or Apache afterwards. A reload isn't always enough, and until PHP restarts, the old code is still running. This is the setup where I'd most recommend getting a developer involved, because it's easy to update the command-line PHP and leave the website on the old one.

After you switch

• Check the new version in WordPress under Tools, Site Health, Info, Server.
• Submit your contact form and confirm the email arrives.
• On a store, run a test order through to payment.
• Browse a few key pages for errors or broken layouts.
• If something's broken, switch back to the old version, then find the plugin or theme causing it before trying again.

Changing the dropdown takes a minute. Making sure nothing breaks is the real work, and on an online store or a site with old plugins it's worth doing properly. I've worked on hundreds of sites across these hosts and plenty of others. If you'd rather I handle it, my PHP upgrade service starts with a free check and a fixed quote. WhatsApp or email and I'll reply within one working day.

Questions people ask

How do I change my PHP version in cPanel?

In cPanel, go to Software, then MultiPHP Manager, tick your domain, choose the PHP version from the dropdown and click Apply. Some hosts use CloudLinux, where the option is called Select PHP Version under Software instead.

How do I update PHP on Afrihost?

Log in to ClientZone, open the Hosting tab, choose Shared Hosting and your domain, then log into Website Manager. On cPanel accounts go to Software, MultiPHP Manager, tick the domain, choose the version and click Apply. On CWP accounts use CWP Settings, Php Selector.

How do I update PHP on xneelo?

In the xneelo Control Panel go to Web Hosting, choose your domain, then Hosting tools, PHP Config, the Configuration tab, Edit, choose the version and Save. On konsoleH it is under Hosting Services, your domain, Manage Services, Configuration, PHP Config.

Does changing the PHP version in my control panel fix PHP2Shell?

Only if the version you choose has been patched by your host. Choosing a supported version (8.2 or newer) is the first step. Then ask your host to confirm that build includes the fixes for CVE-2026-109618 and CVE-2026-109619.

Filed under: PHP · Hosting · cPanel · WordPress · 2026

Sources: cPanel, Plesk, SiteGround, GoDaddy, Hostinger, Bluehost, Afrihost, xneelo, Domains.co.za, WP Engine, Kinsta, CloudLinux.