The October 21 PHP flaws hit every WordPress site, and they won't be the last. Below is the free fix you can do right now. When you're ready, we'll move your site to a platform with no PHP or plugins exposed to the internet, so the next emergency isn't yours to deal with.
You don't need us for this part. Updating PHP is usually a five-minute change in your hosting control panel, or a one-line request to whoever manages your site.
On PHP 8.1, 8.0, or 7.x? Those versions no longer get security fixes at all. Ask your host to upgrade you to a supported version, and test your site afterward, because older themes and plugins sometimes break on newer PHP.
Sources: PHP security advisory · WordPress.org · Tenable
Paste this into a support ticket or email to your hosting company or web developer.
Patching PHP fixes this week's problem. But every WordPress site runs PHP code from WordPress itself, from your theme, and from every plugin you've installed, and most reported WordPress vulnerabilities come from those plugins and themes. Bots scan for them around the clock.
We rebuild your site on modern, fast technology, move your content over, and host it for you. The next PHP emergency becomes our job, and there's nothing on your site for it to attack.
Get a free site reviewYour customers see the same business, just faster. You stop thinking about updates.
Pages, photos, blog posts, menus, hours. We bring it all over, so you don't retype anything.
Your existing links keep working, with redirects set up where anything changes, so Google doesn't lose track of you.
No PHP, no plugin marketplace, no login page for bots to hammer. Security updates are handled on our side.
HTTPS on your domain, regular backups, and monitoring, all part of hosting. Nothing extra to buy.
Fast pages and structured data that Google, ChatGPT and other AI assistants can actually read, not content buried in page-builder scripts.
You work directly with the people who built your site, right here on the island. No ticket queue, no chatbot.
WordPress sites get priority scheduling while the PHP flaws are being attacked.
We look at your current site, what you pay for hosting and plugins, and what it does. You get a straight recommendation and a flat quote.
Before you commit, we can show you a preview of your new homepage so you know exactly what you're getting.
We rebuild the site, bring over your content, and set up redirects. Your WordPress site stays up the whole time.
We switch your domain over and keep things running: security, backups, updates, and a local team you can call.
Jen is a local underwater photographer who sells her work online. She was paying $50 a month for hosting and order fulfillment through Shopify, plus Shopify's fees on every order. We moved her to a custom site hosted by PlateLunch.
We keep your existing page addresses wherever we can and set up redirects for anything that changes, so search engines and old links land in the right place. Faster pages and clean structured data usually help, not hurt.
No. Moving your website doesn't touch your email. We only change the records that point your domain at the website, and leave your mail settings alone.
Yes. Tell us what you need changed, like new photos, hours, prices or a new page, and we take care of it. If you'd like to make some edits yourself, we'll talk through the options in your review.
Usually, yes. We build online stores, booking systems and online ordering. These take more work than a simple site, so we'll scope them in your free review and give you a flat quote. Restaurants can run ordering, their website and a kitchen display on PlateLunch.
Yes. It's your domain, your content, and your code. If you ever want to leave, you take it with you.
No. Updating PHP fixes this week's flaws, and the steps above are free. Moving is for owners who'd rather not go through this again with the next PHP or plugin vulnerability.
Tell us a little about your site. We'll check where it stands, answer your PHP questions, and give you a straight quote to move it. No pressure, no sales pitch.