I will patch php2shell rce and check your site for hacks


About this gig
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a critical remote code execution flaw affecting PHP 5.4 to 8.5. Attacks were reported around the time of disclosure, so patching alone may not be enough. I'll patch your server and check whether it was already compromised.
What I do:
- Identify your PHP version, server type and control panel
- Update PHP to a fixed release (8.2.35, 8.3.36, 8.4.27 or 8.5.12) or your distribution's patched package
- Scan for web shells, unknown PHP files, rogue cron jobs, new admin users and suspicious logs
- Remove backdoors and reset credentials (Premium)
- Test your site and send a short report
Works with: WordPress, WooCommerce, Laravel, custom PHP, VPS, cPanel and Plesk.
Good to know: PHP 7.4, 8.0 and 8.1 have source patches only, with no official binaries. I'll patch from source where possible or plan a safe upgrade. The PHP maintainers say updating is the only complete fix.
Before ordering, message me your PHP version, hosting type and CMS. Please don't send passwords in chat.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Asaduzzaman P
Software Engineer
- FromBangladesh
- Member sinceSep 2026
- Avg. response time1 hour
Languages
English
FAQ
Which PHP versions can you fix?
Official patched releases exist for 8.2, 8.3, 8.4 and 8.5. For 7.4, 8.0 and 8.1 only source patches exist, so I'll patch from source where possible or plan an upgrade. I can't guarantee a clean fix on every old version.
Is patching enough, or was my site already hacked?
Attacks were reported around the time of disclosure, so patching alone may not be enough. Standard and Premium include a scan for web shells, rogue files, unknown admins and suspicious logs.
What access do you need?
Usually SSH or root access for a VPS, or cPanel/Plesk access for shared hosting. A temporary account is best, and you can revoke it when I'm done. Please don't send passwords in the first message.
Will my website break after the update?
It's a risk with any PHP update. I back up first, test after the change, and fix common compatibility issues. Tell me about any custom code or old plugins up front.
I'm on shared hosting. Can you still help?
Often the host controls the PHP version. I can check what you're running, switch to a patched version in your control panel, and scan your files. If the host hasn't patched yet, I'll tell you what to ask them.
How fast can you start?
Message me first with your PHP version and hosting type. Urgent jobs can use the fast-delivery extra, and I'll confirm my availability before you order.
Do you guarantee my site is 100% secure?
No one can promise that. I'll patch this vulnerability, check for signs of compromise and harden your setup, then give you a report of what I found and changed.
What if you find your site was hacked?
Premium covers malware cleanup and credential resets. If you're on Basic or Standard, I'll tell you what I found and offer an upgrade or custom offer.
