Affecting Other - Wordpress

• 23/07/2026 13:00 - 24/08/2026 14:02
• Last Updated 26/07/2026 17:52

Two critical WordPress core vulnerabilities have recently been disclosed. The first (CVE-2026-60137) is a SQL injection flaw in WordPress's query handling; the second (CVE-2026-63030) chains with it to allow unauthenticated remote code execution via the REST API. As an example of what this vulnerability allows, an attacker can create a new wordpress admin user into a website, thereby gaining full access at an administrative  level to the website.  Both are actively exploited in the wild and are listed on the CISA Known Exploited Vulnerabilities catalogue.  The combination of these CVEs and the resulting family of exploits are being referred to as 'wp2shell'.

We have deployed a network-level mitigation across shared hosting fleet on Thuirsday 23/07/2026 which blocks the affected REST API endpoint at the web server layer, protecting sites regardless of their WordPress version. The fix is available in WordPress 7.0.2 (and 6.8.6 / 6.9.5 for older branches - the vulnerability was introduced in 6.0). We recommend updating WordPress core at your earliest convenience.

In some cases the mitigation may affect certain WordPress admin features, most commonly the Appearance -> Widgets editor. If you experience issues with your WordPress dashboard, please open a support ticket and we can apply an exemption to updated Wordpress websites.

Affecting System - JetBackup

• 14/03/2025 17:12 - 20/03/2025 11:17
• Last Updated 14/03/2025 17:14

Our JetBackup backup service is currently undergoing maintenance while our engineers expand the capacity and improve performance of our backup systems.

This will mean that JetBackup backups will not be available for recovery during this maintenance period.  We expect JetBackup in Plesk and cPanel control panels to be available again on Monday.

Please note that backups are still being taken - should you need to restore files, databases or email, please raise a support ticket and our engineers will complete that process for you.

• 25/07/2024 14:08 - 08/08/2024 09:20
• Last Updated 25/07/2024 14:12

Dear 1st Domains customers,

Due to a significant hardware failure around 9am this morning, our hosted exchange service is currently unavailable. Work is underway to recover the service, which we expect to be restored later this afternoon.  There should be no significant loss of data, excepting the period where the server was unavailable.

Our sincere apologies for the disruption.

Kind regards,

1st Domains Hosting

• 19/08/2021 16:25
• Last Updated 20/08/2021 10:03

We are aware of an issue affecting customers using our Exchange Email service. This is currently being looked into by our engineers and we hope to have a resolution as soon as possible. We apologies for the inconvenience caused during this time and appreciate your patience whilst we work towards a fix. 

Update 20/08/2021 - 09:50 - Our engineers appear to have identified the possible cause and hope to have this resolved shortly. 

Update 20/08/2021 - 10:02 - We are asking customers to test their email service as we believe full functionality has now resumed. 

• 22/06/2020 08:50 - 30/03/2021 22:10
• Last Updated 22/06/2020 13:00

We are aware of ongoing issues affecting a number of our Mail Exchange customers following the previously corresponded data migration. This is due to an unexpected delay in the finishing time for the migration. We hope to have the service restored shortly and apologise for any inconvenience caused during this time. 

Update: 12:50 - We ask any customers affected by the before mentioned issues to test their email capabilities as service should now be resumed.