Latest Update: Wednesday, October 21, 2026 at 4:00pm

What's happening:

This week, two critical vulnerabilities in PHP were made public before an official fix was available. If left unpatched, these flaws could allow an attacker to take control of a web server. The PHP team released a security update this morning, and organizations worldwide are now working to apply it.

What we're doing:

Patching is now complete for our Craft 4 & 5 sites. We're also monitoring our servers for any unusual activity. At this time, we have not seen any indication that your website has been affected.

What you need to do:

Nothing is required on your end. Websites on Craft 4 & Craft 5 sites are now able to upload files- although upload limit may be lower. Please reach out to us if you need your limit increased.

Any site Craft 2 or 3 and Expression Engine sites may still be unable to upload images at this time.

If you notice anything unusual in the meantime, or have any questions, please reach out to your account manager.

Thank you for your trust in us to keep your website secure. Please check back here for ongoing updates.