Seravo has responded to the new critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities have been widely reported, affecting websites and online services globally. WordPress sites also use PHP.
More detailed reports on these vulnerabilities have been published by CERT-EU and Ars Technica, for example.
For WordPress sites hosted by Seravo, the situation is under control and no action is required from our customers. Official security patches will be applied as soon as they become available.
We have also received inquiries about the possibility of closing individual sites. Please contact our customer service (help@seravo.com) if you would like to close down your site temporarily.
Proactive security and rapid response are core parts of Seravo’s service. It is moments like these that highlight the value of high-quality, premium hosting.
Status Updates
You can follow updates on the situation on Seravo’s dedicated status page. It is highly recommended to subscribe to incident notifications, directly to your email or other preferred channel: https://status.seravo.com/incidents/7wk2198d5x8f