WordPress PHP patch
A plugin or WAF cannot fix the PHP flaw. Only updating PHP does. Here is the safe way to patch PHP on WordPress.
Plugin compatibility checklist
- Back up the full site (files + database).
- Update WordPress core to the latest version.
- Update every plugin to its latest version.
- Update your theme (and any child theme).
- Run the WP PHP Compatibility Check plugin or hosting scanner.
- Review the compatibility report for deprecated functions.
- Test on a staging copy if your host provides one.
- Switch PHP to a fixed release in your host panel.
- Test forms, login, checkout, caching, and cron.
- Watch error logs for 24 hours after the change.
If a plugin is incompatible
Find a maintained replacement, or ask the plugin author. Do not keep an incompatible plugin active after updating PHP — it can break the site or hide errors.