
Website Design for Australian Small Business (2026)
What a small business website costs in Australia in 2026, with real published prices, plus .com.au rules, GST, hosting, privacy and a hiring checklist.
Website Security
Many owners of Elementor sites are asking which PHP version Elementor needs, after the PHP security fixes of 21 October 2026. This guide gives the stated minimum and recommended versions, the checks to run before you change PHP, what a broken editor looks like, and how to go back if it fails. Sources read 22 October 2026.
For the bigger picture before you start, read our main guide to the PHP vulnerability of October 2026. It explains the flaws and who is exposed.
Two official pages were read for this post on 22 October 2026. The first is Elementor's system requirements page. The second is the Elementor listing on WordPress.org.
| Item | What the page says | Source |
|---|---|---|
| Minimum PHP | 7.4 | Elementor requirements page and WordPress.org listing |
| Recommended PHP | 8.3 or newer ("highly recommend") | Elementor requirements page |
| Minimum WordPress | 6.8 | Elementor requirements page and WordPress.org listing |
| Database | MySQL 5.6 or newer, or MariaDB 10.5 or newer | Elementor requirements page |
| WordPress memory limit | 256 MB minimum, 512 MB recommended, 768 MB for best performance | Elementor requirements page |
The WordPress.org listing showed Elementor version 4.3.5, last changed on 13 October 2026. That number will move, so check the listing for the current one. Two things follow from this. First, you can run Elementor on PHP 7.4 and it will load. That says nothing about whether it is safe. Second, Elementor's own advice and WordPress.org's advice point the same way. WordPress.org also suggests PHP 8.3 or newer, which we went through in our guide to the WordPress minimum PHP version.
On security, php.net's advisory dated 21 October 2026 names the patched versions: 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Anything on 8.1 or older has no official fix. What that means for each branch is in our post on PHP end of life dates.
The requirements page covers Elementor and Elementor Pro. It cannot cover the other code on your site. A normal Elementor site also holds a theme, third-party add-on packs, often WooCommerce, custom CSS and code snippets. Each has its own PHP needs. A check of Elementor alone can say yes while an old add-on says no, so the checks below start with the full list of what is installed.
| What to check | Why it matters for PHP | Who can fix it |
|---|---|---|
| Elementor and Elementor Pro versions | Old versions may use code that new PHP rejects | You, by updating |
| Add-on plugins for Elementor | Often small teams, often slow to update | The author, or you by replacing it |
| Custom PHP snippets | Written for an older PHP, may break on a newer one | A developer |
| Theme and child theme | Custom functions can fail on newer PHP | The theme author or a developer |
| Custom CSS and JavaScript | Usually safe, but test it | You |
| WooCommerce and its extensions | Checkout is the costly place to find a fault | You or a developer, tested on staging |
If your site is a shop, read our notes for WooCommerce shop owners as well.
A PHP change can fail in a few ways. These are the ones to watch for in an Elementor site:
Elementor's help centre has articles on these themes, including one on a fatal error after updating, one on Safe Mode, and two on rolling back to an earlier version. We did not read their steps for this post, so open them yourself before you rely on a method.
The general approach for a white screen or a server error is the same on any WordPress site. Deactivate the plugins, reactivate them singly, and check the error log to spot the one that breaks. The test step of our guide to checking and updating your PHP version walks through it. In the Elementor case, add-on plugins are usually the first to switch off.
Rolling back is two steps, and you need both.
If only one add-on fails, you may not need to roll back at all. You can switch it off, or replace it with a maintained plugin, and keep the new PHP. Staying on an old PHP is a short fix only. Given the 21 October 2026 flaws, aim to be back on a fixed release soon. Our questions to ask your web host will get you a date and the confirmation in writing.
An Elementor site has more moving parts than a plain theme, because the builder, its add-ons and your custom CSS all have to agree with the new PHP. Since the advisory came out we have taken WordPress sites to a newer PHP, normally beginning with a full backup and a review of the add-ons. Prefer to hand it off? The WordPress PHP update gig on Fiverr is priced by the size of your site. Our WordPress development page shows how we build and maintain these sites. Our Fiverr and Upwork client reviews are open for anyone to read, and the walkthroughs on our YouTube channel show how we work, so you can size us up before handing anything over.
On its requirements page Elementor gives 7.4 as the minimum and strongly urges PHP 8.3 or newer. WordPress.org's listing for the plugin also shows 7.4 as the minimum. Checked 22 October 2026.
Elementor recommends 8.3 or newer. Because of the October 2026 security flaws, your release should also be the patched one for its branch or newer, for example 8.3.36 or 8.4.27. Our PHP update guide lists all four.
Elementor itself is not the usual cause. Older add-ons, custom snippets and themes are more likely to fail on a newer PHP. Update everything first, test on a staging copy, and keep a backup.
Deactivate your add-ons, then activate each again in turn and open the editor after every one. Still no culprit? Ask your host to switch back to the previous PHP version and restore your backup. Then get help before trying again.
It will run, but it is no longer fixed by the PHP project, and Elementor does not recommend it. Given the flaws of 21 October 2026, move to a supported, fixed version as soon as you can test it safely.
Yes. A short fixed scope job is a common way to handle it. Look for a clear backup step, a test list, a written report and an administrator invite instead of a shared password.

What a small business website costs in Australia in 2026, with real published prices, plus .com.au rules, GST, hosting, privacy and a hiring checklist.

A step by step check for non-developers: read the Requires PHP and Tested up to fields, use Site Health, handle abandoned and premium plugins, and decide.

What a real WordPress backup contains, where to keep it, host versus plugin backups, how to test a restore, and a checklist for the minute before a PHP change.