Critical PHP vulnerability (21 Oct): patch PHP on your server now. Verploy now shows the PHP version of every site and which ones need action. Check your sites for free → What to do

2.90.1: protection until the fix is safe

Protection until the fix is safe. Verploy can now block the exact request used to exploit a known vulnerability until a safe update is live. The first rule blocks UpdraftCentral remote commands (stolen UpdraftCentral keys, October 2026) on sites with UpdraftPlus; UpdraftPlus’s own backups keep running. Requires Connector 2.23 or later.

A cleaner malware scan. The malware scan no longer reports Verploy’s own working folders or Wordfence’s firewall rules as findings.