Is your website on PHP or WordPress? We take a look, free.
We at Alexopoulos Design Studio look at your site from the outside only, as any visitor could. You get a short note in plain words with what to ask your host or developer. We never need your password.
- Free, no obligation
- No password needed
- Plain words, not jargon
- Outside view only
PHP released security fixes on 21 October 2026.
PHP is the language many websites run on, and most WordPress sites use it.
On 21 October 2026 PHP released fixes for two critical security flaws (CVE-2026-109618 and CVE-2026-109619) that affect PHP installations serving web pages. The fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Source: php.net.
If your site runs on PHP, your host or developer decides when to update. We can't do that for you, but we can look from the outside and tell you what to ask them.
A short note, in words you can pass on.
It is free, up to 5 checks a month, with no obligation. We say clearly what we looked at and what we could not see.
- Whether your site runs on PHP or WordPress, and whether the server shows its PHP version
- HTTPS: whether your site loads over a secure connection
- Security headers your server sends with the page
- Outdated WordPress or plugin versions that are visible to any visitor
- Whether your forms have spam protection
- Then a short written note in plain words, with what to ask your host or developer
- We never try to log in, break in or test attacks
- It is not a security audit and not a guarantee
- We don't fix anything inside the free check. If your site needs work, we quote it separately
- We can't see everything from outside, for example the real PHP version when the server hides it
Three steps, nothing to install.
You send an address. We do not ask for any access.
- 1
Send us your site address
Use the form below. If you know who hosts the site or who built it, tell us, but you don't have to.
You give: a web address - 2
We look from the outside
We check what any visitor's browser can see. We don't log in and we don't try to get past anything.
You give: nothing else - 3
You get a short note
In plain words: what we saw, what to ask your host or developer, and what can wait. If it would help, we can quote the work.
You get: a written note
Questions, answered.
Something else on your mind? Ask us. George replies personally.
Is it really free?
Yes. The check is free, up to 5 a month, with no obligation to buy anything afterwards.
Do you need my password?
Never. We look at your site from the outside only, as any visitor could. We don't log in, break in or test attacks.
Is my static site affected?
These two flaws affect PHP installations that serve web pages. A site that doesn't run PHP, such as a static site, is not affected by them. We'll tell you in the note if yours doesn't run PHP.
What if my host already updated?
Then there is nothing to do about this one. From outside we can't always see the real PHP version, so the note says what we could and couldn't see. Your host can confirm the exact version.
Is this a security audit?
No. It is a short look from the outside, not a security audit and not a guarantee that your site is safe.
Send us your site address. We reply with a short note.
If the note shows your site needs work, we can quote a website rescue or the care plan. No obligation.
Send a short brief
George replies within one working day (Mon–Fri, Athens time).
Viber didn't open? Add +30 697 772 4400 in Viber, or use WhatsApp or a call.
George replies personally, usually the same working day.
or write below
Message sent
Thank you. We have your brief. George will reply within one working day (Mon–Fri, Athens time).
Your message is ready
It's waiting in your email app — just press send. George replies personally.