PHP 8.5.6, 8.4.21, 8.3.31, and 8.2.31 are security releases. Use this hosting checklist for cPanel, Plesk, WordPress, WooCommerce, and PHP-FPM updates.
Update Caddy to 2.11.3 or later for CVE-2026-45135, then review PHP-FPM routing, upload paths, logs, and writable web directories.
Updated 2026 checklist for hardening an Ubuntu 22.04 LTS WordPress LEMP stack with Nginx, PHP-FPM, TLS, updates, backups, plugin controls, and CDN/WAF review.
2026 update: Ubuntu 22.04 LTS is still a valid long-term support base for existing WordPress LEMP servers, but the old WordPress 6.2 wording should not be treated as a current build target. For a new
