Emergency Mitigation of PHP Security Vulnerability Affecting EasyWP Managed Hosting | October 21, 2026

Dear Customers,

We are taking emergency measures to mitigate a recently disclosed security vulnerability in PHP that may expose websites to potential attacks. You may find more information about the vulnerability at https://www.php.net/archive/2026.php#2026-10-20-1

We are currently rolling out security updates for all EasyWP websites. As part of these mitigation efforts, we are also enabling HackGuardian as an additional security measure to help protect websites against potential attack vectors associated with this vulnerability.

HackGuardian is a security feature that puts websites in partial read-only mode, limiting changes to website files and content to help protect against potential attacks.

Please note that while HackGuardian is enabled, customers will not be able to install new themes or plugins on their websites. This restriction is part of our security measures to help protect websites while mitigation efforts are ongoing.

HackGuardian has been enabled globally and cannot be disabled by individual customers. Feel free to check more details about the HackGuardian feature here:
https://www.namecheap.com/support/knowledgebase/article.aspx/10711/2284/easywp-hackguardian/

Affected services: All EasyWP websites.

We do not have an estimated completion time yet.

As a further step in mitigating the vulnerability, we will update EasyWP websites to the new PHP version immediately after the updated PHP image is officially available for download.

We sincerely apologize for any inconvenience and thank you for your patience and understanding. We will update this status post as soon as more information becomes available.

Should you have any questions, you are welcome to contact our Support Team.

Kind regards,
Namecheap Support Team