Browse categories
Explore
Fiverr Pro
English
$
USD
I will patch your PHP server for the php2shell critical vulnerability
Imran M
Level 2
About this gig
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) is a critical PHP flaw (CVSS 9.2) allowing remote code execution without login. Exploitation attempts are already being reported. The only complete fix is updating PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
Why Us
Senior FullStack developer, 8+ years, 100+ Fiverr reviews. I run a web agency and patched every client site within hours of release. cPanel, Plesk, Cloudways, WP Engine, Kinsta, SiteGround, Hostinger, DigitalOcean, VPS.
How it works:
- Snapshot/backup BEFORE any change
- Update PHP from your distro, cPanel, Plesk or official packages
- Restart PHP-FPM, Apache, LiteSpeed or FrankenPHP workers
- Verify the running version through the web server, not just CLI
- Check the site still works after the patch
- Quick look for signs of compromise (web shells, new cron jobs, odd PHP processes)
On PHP 8.1 or older? There is no official fix. I'll apply a vendor backport if one exists for your OS, or plan a safe upgrade to 8.3 or newer.
Supported: Ubuntu, Debian, AlmaLinux, Rocky, cPanel/WHM, Plesk, Nginx, Apache.
Please message me before ordering with your OS, panel and PHP version (php -v).
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Imran M
Imran M
Websites That Win You Customers, Delivered Fast
Level 2
- FromPakistan
- Member sinceSep 2016
- Avg. response time1 hour
- Last delivery2 weeks
Languages
Urdu, English
Hi, I'm Imran, founder of Kodevengers digital agency. Over 8+ years I've delivered hundreds of websites, web apps, and eCommerce stores to clients across the US, UK, Europe, Australia, and the Middle East. I specialize in WordPress, Shopify, WooCommerce, React, Next.js, Node.js, and Laravel.
Why clients keep coming back:
✅ Fast delivery (most sites in 24-72 hours)
✅ 1-hour response time
✅ Unlimited revisions until you're happy
✅ Free post-delivery support
Message me with your idea and I'll reply with a plan and a fair price today.
Among my clients
Vertexo
GLS Media
My Portfolio
FAQ
My hosting company says they already patched. Do I still need this?
Hosts patch the server, but your site may be pinned to an older PHP version, and the patch does nothing if your site was compromised before it. I verify both.
Will upgrading PHP break my site?
I take a full backup first and check plugin and theme compatibility before switching versions. If anything breaks, I fix it or roll back.
What is the difference between php2shell and wp2shell?
php2shell is in PHP itself and affects every PHP website. wp2shell is in WordPress core (versions before 6.9.5 / 7.0.2). WordPress sites need both checked.
What access do you need?
Hosting panel (cPanel, Plesk or similar) or SSH, plus WordPress admin for WordPress sites. Temporary access is fine. Change the password after delivery.
My site is already hacked. Which package?
Premium, or message me first and I will tell you what it needs.
Do you work with Laravel, Magento or custom PHP?
Yes. Add the Laravel / custom PHP extra.
What do I get as proof?
Before and after phpinfo screenshots, scanner output for both vulnerabilities, and a short written report of what was changed.
