Selfstack
Free site check
We move your WordPress site to a site you own outright. Change peak-season rates, add a city you serve or run a move-day special in minutes. No plugins to update, no developer to wait on.
Preview is ready. Say "publish" to put it live.
On October 21, 2026, PHP disclosed two critical flaws, CVE-2026-109618 and CVE-2026-109619. They let an attacker run code on a web server without logging in. WordPress runs on PHP, so any WordPress site on an unpatched version is exposed. Updating WordPress or its plugins does not fix it. Your host has to install the patch, and attacks were reported the same day.
In your WordPress dashboard, go to Tools, then Site Health, then Info, then Server to see your PHP version.
The fixed versions are 8.5.12, 8.4.27, 8.3.36 and 8.2.35, or your host's own patched package. Ask your host to confirm in writing that the patch is installed.
The site we build for you is plain files served from your own Cloudflare account. No PHP runs on it, so a flaw like this has nothing to attack, and you stop waiting on a host's patch schedule.
A new site does not remove an existing compromise. If you suspect yours was hit, tell us and we scan before we move anything.
Sources: Patchstack, Search Engine Journal, Codeable.
We look at your site, the plugins it depends on and what it takes to move it. You get a plain-English report.
Your pages, photos and forms move to a fast, plain-code site that looks like yours. Every URL is kept or redirected so Google still finds you.
You compare the old and new site page by page. When you approve, we point your domain to the new one.
In a 60-minute handover we set up Claude on your account and make five real edits together. After that, it is yours.
| Topic | WordPress today | After the move |
|---|---|---|
| Making a change | Email a developer, wait, pay for small edits | Tell Claude. Live in minutes. |
| Plugins | Updates that can break the site | None to maintain |
| PHP and security patches | On your host's schedule | No PHP on the site |
| Hosting | A monthly host plan | Cloudflare account in your name, covered by the monthly fee |
| Ownership | Tied to your theme, plugins and host | Code in your GitHub. You can leave anytime. |
$1,500one-time, plus $50 a month
Online stores, memberships and course sites need a separate quote. You will need your own Claude subscription to make edits.
We keep every URL or redirect it, and we check the new site against your old sitemap before launch.
No. If you can send a text message, you can edit your site. If the handover session does not get you making edits on your own, we fix the setup at no charge.
Most quote and booking tools, including SmartMoving forms, embed on the new site the way they do today. We confirm yours in the free site check.
Moving to a new site does not remove an existing compromise. We scan your content for suspicious files before we move anything, and you should change any passwords and keys your server held.
You do. The code lives in your GitHub account and the hosting in your Cloudflare account. If you ever want to leave us, you take everything with you.
Send us your website address. We reply with what we find and what a move would involve for your site. You can also email us directly at hello@getselfstack.com.