Your server reports a PHP version released after the security fix. This is based on the version number only, so it's still worth confirming with your hosting provider.
Free tool for online stores
Is your store affected by the October PHP security update?
Enter your website address. We'll read the PHP version your server shares publicly and tell you whether it includes the latest security fix.
We only read what your server already shares with every visitor. We don't scan, log in to or test your site.
01. Results
What your result meansThree possible outcomes
Your server reports a PHP version from before the fix. Ask your hosting provider to update PHP, or to confirm in writing that the fix has been applied. Some hosts apply fixes without changing the version number.
Your server doesn't share its PHP version, which is common and good practice. It doesn't mean your site is safe or unsafe. Check your version in WordPress instead.
02. Unknown result
Check your version in WordPressTakes about a minute
Most stores get an Unknown result because their server keeps its PHP version private. Here's how to find it yourself.
- Log in to WordPress. Go to
yourstore.co.za/wp-admin. - Open Site Health. In the left menu, go to Tools, then Site Health.
- Open the Info tab at the top of the page.
- Expand the Server section.
- Find "PHP version". It shows three numbers, for example
8.3.35.
Using WooCommerce? You can also go to WooCommerce, then Status, and look under Server environment.
Your hosting panel may only show something like "8.3". That's the version family, not the full version, so it can't tell you whether the fix is included.
Patched versions
| Version family | Fixed in |
|---|
PHP 8.0 and older no longer get official security updates. If you're on one of these, speak to your hosting provider about upgrading.
03. FAQs
QuestionsAbout this check
Does this tool scan or test my site?
No. It makes one ordinary request, the same as a browser opening your homepage, and reads the response headers. It doesn't read your pages, log in or try any kind of attack.
Is an "Up to date" result a guarantee?
No. The check compares version numbers only. Headers can be changed or out of date, so confirm with your hosting provider if you need certainty.
My result says "Needs update" but my host says I'm patched.
Some hosting providers apply security fixes without changing the version number. If yours has, ask them to confirm it in writing.
Do I need to be a Stitch merchant to use this?
No. Anyone can use it.
I'm a Stitch merchant. What should I send you?
A screenshot showing your full PHP version from WordPress Site Health, or written confirmation from your hosting provider that the fix has been applied. Reply to our email or contact Stitch support.