Serious PHP security vulnerabilities - Update your PHP versions! October 21, 2026

Two serious security vulnerabilities in PHP have just been made public. Updates are already available:
https://www.php.net/archive/2026.php#2026-10-21-5

These vulnerabilities have nothing to do with Zenphoto itself. Your webhost is responsible to ship these updates. Make sure your website runs with at least PHP 8.2 as earlier PHP versions do not get any security fixes anymore. After logging into your site you can see the PHP version on the "overview" page in the left column.

Zenphoto 1.6.8 is compatible with PHP 8.4 (and already generally with 8.5 but we don't recommend it yet). If you use older third party or custom plugins or themes make sure that these are still maintained and are compatible.

And as a sidenote: The next Zenphoto version will be PHP 8+.

For questions and comments please use the forum or discuss on the social networks.