Important PHP security update. Check your SOTESHOP store.

Serious security vulnerabilities have been discovered in PHP that may pose a threat to online stores. The issue does not directly affect SOTESHOP, but rather the servers on which stores operate. Even if you are using PHP 8.3, you need to check the exact version. In SOTESHOP AI, we have added a special security notification that helps detect outdated PHP versions and informs users when an update is required.

What do you need to check and do?

1. Update your store to SOTESHOP AI 8.4.4.
2. Upgrade PHP to version 8.3.36 (or a newer version in the 8.3.x series that includes the appropriate security fixes).

We would like to remind you of the importance of keeping SOTESHOP up to date. Now is the last opportunity to make the necessary changes before the upcoming holiday season, when store security and stable operation are particularly important.

Why is the update necessary?

Serious vulnerabilities CVE-2026-109618 and CVE-2026-109619 have been discovered in PHP. These are not vulnerabilities in SOTESHOP, but in PHP, the technology on which online stores run. Therefore, even an up-to-date store may be exposed to security threats if it uses an outdated server environment.

Failing to update PHP may allow attackers to exploit security vulnerabilities, which, depending on the vulnerability and server configuration, could lead to unauthorized control of the store, theft of customer data, modification of orders, or disruption of store operations. The consequences may also include financial losses, sales downtime, and loss of customer trust.

The upcoming holiday season makes store security even more important. During periods of increased sales, even a short interruption in store operations can result in lost orders. That is why we recommend performing the updates now rather than leaving them until the last minute.

New security notification in SOTESHOP AI

To make verification easier, we have added a special security notification to SOTESHOP AI that checks the PHP version and informs users when an update is required. This allows store owners to quickly determine whether their server environment needs to be updated.

Notification about an outdated PHP version indicating that a security update is required.

Notification confirming that the PHP version is up to date.

How to update PHP?

We can upgrade your PHP version for you, even if your store runs on an external server. For more information, visit: Upgrade PHP from version 7.x to PHP 8

You can also perform the upgrade yourself using our documentation: Instructions for upgrading PHP to version 8

Summary

The security of an online store depends on keeping both SOTESHOP AI and the server environment on which it operates up to date. The discovered PHP vulnerabilities demonstrate how important it is to regularly install security updates.

The upcoming holiday shopping season is a time when your store should operate without interruptions. We recommend performing the necessary updates now to reduce the risk of security issues and ensure uninterrupted sales.

Update

Updates are included as standard for all SOTESHOP AI 8 stores with SOTESHOP AI Start, Standard, PRO, or VIP subscription plans. Check the store update documentation: Update documentation

Related pages

• Instructions for upgrading PHP to version 8
• Upgrade PHP from version 7.x to PHP 8
• SOTESHOP AI online store
• Store update documentation