WPX Business PHP Versions: Per-Site Changes, Modules & the 2026 Patch Response

What WPX currently lists

WPX’s current PHP/MySQL knowledge-base page lists PHP 7.4 through 8.5 as supported, with 8.6 still being tested. It says PHP 5.6, 7.2 and 7.3 are deprecated and no longer receive security updates, while also mentioning that support may be able to enable some older versions on request. That final statement needs care: WPX’s report on the 21 October 2026 security event says sites running below PHP 7.4 were moved to patched PHP 7.4 and that no WPX site was running anything older at the time of the report. Treat 7.2/7.3 as unconfirmed, not as a guaranteed selectable option.

Change PHP per site, not by guesswork

WPX’s control-panel guide shows the workflow: select the website, choose the PHP version and save the change. Before switching a production site, check its WordPress core, theme, plugins and custom code against the target runtime. A version number being visible in the selector does not prove every plugin is compatible.

Modules are tied to the selected PHP version

WPX lets users enable certain modules/functions, including options such as Ioncube, SOAP, Intl and GMP. The provider states that module choices apply only to the PHP version currently used by that site. If you switch from one PHP branch to another, recheck the required modules. A plugin can fail because a module is missing even when the PHP version itself is supported. Record the working version and module set before a change so you can compare behavior during rollback.

What the October 2026 patch report does—and does not—prove

WPX reports that two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were addressed through temporary hardening and patched builds, with its rollout completed in about 90 minutes. It also says sites below 7.4 were moved to patched PHP 7.4. That is evidence of a provider-reported response to that event, not a promise that every future vulnerability will be patched on the same timeline or that an old application is automatically compatible after a forced runtime change.

Prefer supported runtimes for new sites

The PHP project publishes active and security-support windows for maintained branches, while WordPress recommends PHP 8.3 or greater for current installations. A host can patch its own package, but that does not restore upstream support to an end-of-life branch or guarantee modern themes and plugins will work.

Buying decision

Choose WPX Business if you want managed WordPress hosting with per-site PHP selection and control over selected modules. It is particularly useful when sites in one account need different upgrade schedules. If a business-critical site depends on PHP 7.2 or 7.3, get written confirmation from WPX before migration or renewal; the current official pages do not support an unconditional promise. For a new site, target a currently supported PHP branch, test on staging and keep a recent backup before changing versions.

WPX Business currently shows $19.99/month equivalent on the five-year prepaid path, or $1,199.60 total with 20 months free. Shorter billing terms differ, so confirm the live checkout before buying.\n\nAffiliate disclosure: Toolnavia may earn a commission from an eligible WPX purchase.