ALERTCritical PHP vulnerability · CVE-2026-109618 · CVE-2026-109619 · 21 Oct 2026
<?doiusephp?>

Is Wix affected by the PHP security issue?

No.

No action needed for the website itself. Wix hosts your website and takes care of server maintenance and security patches. Check the other systems you run yourself.

Check your website

Run a free check on your website, or on other sites and tools you use.

What to check

  1. 01

    Think beyond your main website

    Webshops, booking systems, intranets, customer portals and subdomains (like shop. or blog.) can run on different software. Check those too.

  2. 02

    Check other products you use

    Some appliances and software packages include PHP. The Dutch NCSC keeps a list of affected products; watch for updates from your vendors.

Good to know

  • Hosting is included for every Wix website, and Wix handles it for you. Source ↗
  • Wix takes care of server maintenance and security patching, and applies updates automatically. Source ↗
  • A separate website, booking system or tool you use next to Wix may still run on PHP.

Questions & answers

Do I need to do anything for my Wix website?

Not for the website itself: Wix maintains and patches its servers. Do check any other websites or systems you run yourself.

Our checker found no PHP on my Wix site. Can I be sure?

For the Wix website itself, yes: it's Wix's responsibility. Other parts of your business, such as a separate shop or booking system, can still use PHP.

More: How to check if your website uses PHP · The October 2026 PHP security issue, explained

Other platforms: WordPress · WooCommerce · Joomla · Drupal · Magento · PrestaShop · TYPO3 · Shopify · Squarespace

SOURCES