# PHP vulnerabilties PHP2Shell **URL:** \ **Category:** Support\ **Created:** [October 21, 2026, 1:43pm UTC](https://community.localwp.com/t/php-vulnerabilties-php2shell/52674 "2026-10-21T13:43:03Z")\ **Posts on this page:** 1\ **Showing post:** 4
**Author:** ![nickc](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/nickc/32/21209_2.png) [@nickc](https://community.localwp.com/u/nickc)\ **Post date:** [October 22, 2026, 12:31pm UTC](https://community.localwp.com/t/php-vulnerabilties-php2shell/52674/4 "2026-10-22T12:31:45Z")
## New patched PHP versions are now available in Local for all OSs - **No Local update is needed.** The latest Local version has not changed: [https://localwp.com/releases/](https://localwp.com/releases/) - Create sites with the latest PHP by choosing one of these versions in the Custom Environment page: - 8.2.35 - 8.3.36 - 8.4.27 - 8.5.12 - Update existing Local sites by clicking “Update” in the PHP row on the site info screen. @Henkk No patches for earlier versions are available from the PHP foundation as they are end of life: [PHP: Supported Versions](https://www.php.net/supported-versions.php). Local does not expose your site to the internet by default, so the risk of running older versions locally is lower than public-facing production sites, but it is good practice to use the newest versions. ### Create a site with a custom PHP version ![Choose "custom" environment and select the PHP version](https://us1.discourse-cdn.com/flex019/uploads/lwpforums/original/3X/0/1/01581cbcc9196c355a464148dc94c3acd3148604.png) ### Update an existing site to a new PHP version ![Click "update" next to "PHP version" in site info](https://us1.discourse-cdn.com/flex019/uploads/lwpforums/original/3X/d/8/d85b935b11990287a1f446f79ffba0b061d3a735.png) ### Other release notes - macOS 14 is the minimum version required for Intel builds of PHP. --- _[View the full topic](https://community.localwp.com/t/php-vulnerabilties-php2shell/52674)._