Major incident

Fasthosts: Important: Wordpress security vulnerability

Affected: WordPress Hosting

Current status of Fasthosts: Operational — live Fasthosts status

Timeline

1. Jul 20, 2026, 17:37 UTC
   monitoring
   On July 17, the "wp2shell" security vulnerability became known in the popular CMS WordPress. This vulnerability potentially allows attackers to inject malicious code into affected web spaces. This affects WordPress installations running versions 6.8.0–6.8.5, 6.9.0–6.9.4, 7.0.0–7.0.1, or the 7.1 beta 1 pre-release. The WordPress team has released patched versions — 6.8.6, 6.9.5, 7.0.2, and 7.1 beta 2 — which resolve the vulnerability. If you are running a self-managed WordPress installation, We strongly recommend you update to a patched version as soon as possible. Further information regarding the security vulnerability can be found at How to Protect Your WordPress Site Against the wp2shell (CVE-2026-63030) Vulnerability
2. Jul 20, 2026, 18:12 UTC
   monitoring
   We are continuing to monitor for any further issues.
3. Jul 21, 2026, 12:31 UTC
   monitoring
   We are continuing to monitor for any further issues.
4. Jul 23, 2026, 08:48 UTC
   monitoring
   We are continuing to monitor for any further issues.
5. Jul 23, 2026, 08:50 UTC
   monitoring
   We are continuing to monitor for any further issues.
6. Jul 23, 2026, 09:53 UTC
   monitoring
   We are continuing to monitor for any further issues.
7. Jul 23, 2026, 22:20 UTC
   monitoring
   We are continuing to monitor for any further issues.
8. Jul 27, 2026, 08:15 UTC
   monitoring
   We are continuing to monitor for any further issues.
9. Aug 18, 2026, 13:39 UTC
   resolved
   The issue has been resolved.

Updates as published by Fasthosts (original).