What Plesk says
Plesk KB article (created 2026-10-20, last updated 2026-10-21T17:23Z) says Linux fixes are available for Plesk PHP 8.2 (8.2.35), 8.3 (8.3.36), 8.4 (8.4.27) and 8.5 (8.5.12). PHP 7.4, 8.0 and 8.1 (EOL) have no fix yet, Windows fixes are not available yet, and sw-engine (the PHP used by Plesk itself) fixes are planned as hotfix 18.0.80#11 and 18.0.81#4.
Fixes for Plesk for Linux are already available for PHP 8.2 (as 8.2.35)Fixes for Plesk for Windows are not available yet.Check the PHP version
Plesk UI: Tools & Settings > PHP Settings (versions shown in handler names). Linux CLI: /opt/plesk/php/8.3/bin/php -v (substitute the version). Plesk version: Home > System Overview or 'plesk version'.
Update PHP
UI: Tools & Settings > Updates > Update Components > Continue. CLI: 'plesk installer update'. Add or remove PHP versions: 'plesk installer --select-release-current --show-components' to list, then e.g. 'plesk installer add --components php8.3' (Linux). Plesk installs updates automatically by a nightly task if 'Automatically install Plesk updates' is enabled at Tools & Settings > Update Settings.
Restart PHP
UI: Tools & Settings > Services Management, restart the relevant PHP service. SSH (Linux): list handlers with 'plesk bin php_handler --list | grep -E plesk.*fpm | awk -F" " '{ print $1 }'' then 'service plesk-php71-fpm restart' (substitute handler). Plesk KB says if a service component is updated, its service will be restarted.
Pages we read
- support.plesk.com/
hc/ en-us/ articles/ 44397729587351-Vulnerability-CVE-2026-109618-and-CVE-2026-109619-Remote-code-execution-in-PHP-shipped-with-Plesk - support.plesk.com/
hc/ en-us/ articles/ 12377849188759-How-to-install-Plesk-updates - support.plesk.com/
hc/ en-us/ articles/ 12377523222679-How-to-install-or-remove-additional-Plesk-PHP-versions-on-a-Plesk-server - support.plesk.com/
hc/ en-us/ articles/ 12377111271959-How-to-restart-PHP-service-in-Plesk