How to update PHP in cPanel
Bluehost, HostGator, A2, Namecheap and most shared hosts put the PHP version behind one cPanel screen. Here's where it is and what to pick.
In cPanel, open Software → MultiPHP Manager, tick your domain, pick the newest fixed branch and click Apply. cPanel lets you choose the branch; your host decides when the fixed patch release (8.2.35, 8.3.36, 8.4.27, 8.5.12) is installed on the server, so confirm with them.
The steps
- Log in to cPanel. Usually at
yourdomain.com/cpanelor through your host's account page (Bluehost, HostGator, A2 Hosting, Namecheap, InMotion, GreenGeeks and many others all use cPanel). - Open MultiPHP Manager. It's under the Software section. If you only see Select PHP Version (CloudLinux), use that instead; the idea is the same.
- Tick your domain and pick a version. Choose the newest fixed release in your branch, or 8.3 / 8.4 if you're on an old branch. Click Apply. The change is immediate.
- Check that the host actually has the fixed release. cPanel shows the branch (for example “PHP 8.3”), not always the patch number. The host decides when the fixed patch is installed on the server. If your branch is listed but the checker still reports an older patch, open a support ticket and ask when 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12 lands.
- Click through the site. If a page errors after the switch, pick the previous branch in MultiPHP Manager to put it back, then update the plugin or theme that objected and try again.
Which version to pick
Pick 8.3 or 8.4 for a WordPress site today; WordPress itself recommends PHP 8.3 or newer. 8.2 is still patched for PHP2Shell (8.2.35), but its security support ends on December 31, 2026, so a move now saves a second one in a few weeks. 8.5 is the newest branch; use it once your theme and plugins say they support it. If the list shows 8.0, 8.1 or 7.x, don't pick those; they're affected and will not be fixed (PHP's supported versions).
Sources
- cPanel docs: MultiPHP Manager
- PHP: supported versions and end-of-life dates
- WordPress.org: hosting requirements (PHP 8.3 or newer recommended)
- NVD: CVE-2026-109618 and CVE-2026-109619
Common questions
Where is MultiPHP Manager in cPanel?
In the Software section of cPanel. Hosts that use CloudLinux may show Select PHP Version instead, which does the same job.
Why doesn't cPanel show the exact PHP patch number?
MultiPHP Manager lists branches such as PHP 8.3, and the host decides which patch release of that branch is installed. To confirm you have 8.3.36 or later, check the PHP vulnerability checker or ask your host.
Can I undo a PHP version change in cPanel?
Yes. Open MultiPHP Manager again, select the domain and choose the previous version. The change applies right away.
Part of PHP2Shell: is your website affected, and what to do. Not sure which setup you have? Run the free PHP check and the result tells you.