KiwiData is aware of a recently disclosed critical security vulnerability affecting PHP, commonly referred to as PHP2Shell.

PHP is widely used by websites and web applications around the world, including platforms such as WordPress, WooCommerce and many other content management systems.

What is PHP2Shell?

PHP2Shell refers to critical vulnerabilities discovered in PHP that could potentially allow an attacker to execute unauthorised code on a vulnerable server.

This is an industry-wide PHP security issue and is not specific to KiwiData or our hosting platform.

Is KiwiData affected?

KiwiData is actively reviewing our hosting infrastructure, PHP versions and associated services to ensure the appropriate security updates are applied.

We are also monitoring our systems for unusual activity as part of our normal security procedures.

At this time, we have no indication that this security advisory represents a compromise of customer websites or accounts.

Do customers need to do anything?

For customers using KiwiData managed hosting services, no immediate action is required. KiwiData will manage the necessary server-level PHP security updates.

Customers running older PHP versions may need to move to a currently supported PHP release. Where an upgrade could affect website compatibility, we will assess this and contact affected customers where necessary.

We continue to recommend that customers keep WordPress, plugins, themes and other website applications up to date as part of normal website security maintenance.

Ongoing Monitoring

KiwiData will continue to monitor this vulnerability and apply additional security updates or mitigations as they become available.

We take the security of our hosting infrastructure and customer services seriously and will provide further updates if there are any significant changes.

KiwiData Support
New Zealand Hosting & Domain Services