Running a professional celebrancy business involves much more than writing and delivering meaningful ceremonies. Whether you’re conducting funerals, weddings, naming ceremonies or vow renewals, your website is often the first point of contact for the families and couples you support.

A well-designed website helps people understand your services, learn about your approach and decide whether you’re the right celebrant for them.

However, another important responsibility shouldn’t be overlooked: keeping your celebrant website secure, up to date, and working properly.

Recent security concerns surrounding PHP, the programming language used by WordPress, have highlighted why regular website maintenance matters.

You don’t need to be technically minded to take website security seriously. Understanding a few basic principles can help protect your business, your reputation and the personal information people share with you.

In this guide, The School of Civil Celebrancy explains what celebrants need to know about PHP, WordPress security, website backups and the practical steps you can take to keep your website safe.

Why Website Security Matters for Professional Celebrants

When someone contacts a celebrant, they may be sharing information during a particularly important or emotional time in their life.

A family arranging a funeral may share details about the deceased, their relatives, and their ceremony requirements. A couple planning their wedding may share personal contact details, their ceremony plans and other information about their relationship.

As professional celebrants, we have a responsibility to handle that information appropriately.

While most celebrants understand the importance of confidentiality during meetings and ceremonies, the same principles should extend to the websites and digital systems used within their businesses.

Poor website security can create several risks, including:

• Unauthorised access to personal information.

• Malicious software being installed on a website.

• Contact forms being compromised or failing to deliver enquiries.

• Website visitors being redirected to fraudulent pages.

• Damage to a celebrant’s professional reputation.

• Loss of website content or disruption to business operations.

Keeping your website secure is therefore an important part of running a responsible celebrancy business.

What Is PHP and Why Should Celebrants Know About It?

PHP is a programming language that operates behind the scenes on many websites, including those built using WordPress.

Although visitors don’t normally see it, PHP helps your website perform many everyday functions.

For example, it can help WordPress display website pages, process contact forms, operate booking systems and communicate with the website’s database.

Like other software, PHP is regularly updated to address security vulnerabilities, improve performance and correct technical problems.

Over time, older versions stop receiving security support.

When this happens, vulnerabilities discovered after the support period ends may remain uncorrected, potentially exposing websites to unnecessary risks.

For celebrants using WordPress, understanding which PHP version their website runs is an important first step towards maintaining website security.

Important PHP Security Update: October 2026

On October 21, 2026, the PHP development team released important security updates addressing two critical vulnerabilities.

These vulnerabilities could potentially allow an attacker to execute malicious code on affected servers without first logging in.

The PHP development team strongly recommended that users update their installations immediately.

Security fixes were released for the following versions:

• PHP 8.3.36

• PHP 8.4.27

• PHP 8.5.12

• PHP 8.2.35

This announcement is particularly relevant to celebrants who operate WordPress websites, as PHP is an essential part of the WordPress system.

It doesn’t mean that every WordPress website has been compromised. However, it does mean website owners should check that their hosting provider has applied the appropriate security updates.

If you’re unsure whether your website is protected, contact your hosting provider and ask them to confirm that your PHP installation has received the latest security fixes.

Which PHP Version Should Celebrants Be Using?

WordPress currently recommends PHP 8.3 or higher.

However, there’s an important difference between using a supported PHP version and using the latest security release of that version.

For example, a website running PHP 8.3 may still require a security update if it hasn’t been updated to the latest available release.

As of October 2026, the PHP support schedule is:

Although PHP 8.3 remains supported, it’s now receiving security fixes rather than general maintenance updates.

Celebrants should therefore aim to use PHP 8.3 as a minimum, while considering PHP 8.4 or PHP 8.5 where their website and hosting arrangements support it.

Never change your PHP version without checking compatibility, particularly if your website uses older themes, booking systems or specialist plugins.

How to Check Your PHP Version in WordPress

Checking your PHP version is relatively straightforward.

If you have access to your WordPress dashboard, follow these steps:

1. Log in to your WordPress website.

2. Select Tools from the left-hand menu.

3. Click Site Health.

4. Select the Info tab.

5. Open the section labelled Server.

6. Find the entry marked PHP version.

You should now be able to see which version your website is running.

If you’re using PHP 8.2 or an older version, speak to your hosting provider about upgrading.

If you’re already using PHP 8.3 or later, check that the latest security updates have been installed.

Some hosting providers manage PHP updates automatically, while others allow customers to select their preferred version through a hosting control panel.

It’s important to understand which arrangements apply to your website.

Why Keeping WordPress Updated Is Essential

WordPress is one of the most widely used website platforms in the world.

It’s popular because it allows website owners to create and manage professional websites without needing extensive programming knowledge.

However, WordPress requires regular maintenance.

Updates may address security weaknesses, correct technical problems, improve compatibility and introduce new functionality.

Ignoring updates can leave your website running software with known vulnerabilities.

Celebrants should regularly check for updates to the WordPress system itself.

You can normally do this by visiting Dashboard → Updates.

Before installing significant updates, make sure you have a recent, reliable website backup.

After updating, check that your website continues to operate correctly, particularly your contact forms, booking systems and important service pages.

WordPress Plugins: Useful but Important to Maintain

Plugins are additional pieces of software that extend what WordPress can do.

For celebrants, plugins may provide useful features such as contact forms, appointment bookings, search engine optimisation, spam protection and website security.

However, every plugin adds software that must be maintained.

An outdated or poorly maintained plugin can create security vulnerabilities, particularly when developers no longer provide updates.

Celebrants should:

• Keep all active plugins updated.

• Remove plugins that are no longer required.

• Avoid installing plugins from unknown or untrustworthy sources.

• Check whether plugin developers continue to provide support.

• Replace abandoned plugins with maintained alternatives.

• Review plugins periodically to ensure they’re still necessary.

It’s worth remembering that a deactivated plugin may still contain files on your website.

If you no longer need it, removing it is generally preferable to leaving it installed indefinitely.

The same principle applies to WordPress themes.

Keep your active theme updated and remove unused themes, apart from any maintained backup theme you may reasonably need.

Should Celebrants Install a WordPress Security Plugin?

A reputable WordPress security plugin can provide an additional layer of protection.

Some commonly used options include Wordfence and Solid Security.

Depending on the product, features may include:

• Monitoring suspicious login attempts.

• Scanning website files for malicious software.

• Limiting repeated unsuccessful login attempts.

• Providing firewall protection.

• Alerting website owners to potential security concerns.

• Supporting stronger login security.

However, security plugins are not a replacement for keeping WordPress, PHP and other software updated.

They should be regarded as one part of a wider approach to website security.

It’s also sensible to avoid installing several security plugins that perform the same functions, as overlapping features can sometimes cause compatibility or performance problems.

What If Your Celebrant Website Uses Wix, Squarespace or Another Platform?

Not every celebrant uses WordPress. Many professional celebrants build their websites using platforms such as Wix, Squarespace, Shopify or GoDaddy Website Builder.

If you’re using one of these services, the good news is that you generally won’t need to worry about updating PHP yourself.

Unlike a self-hosted WordPress website, these platforms are usually fully managed. This means the company providing the service takes responsibility for maintaining the underlying software, servers and platform security.

For example, if your website is built using Wix or Squarespace, you won’t normally see a PHP version setting within your website dashboard.

The platform provider manages those technical updates on your behalf.

However, this doesn’t mean your website is automatically protected against every possible security risk.

What Should Celebrants Using Wix or Squarespace Check?

Even when your website provider manages the technical side of security, there are still some important steps you should take.

These include:

• Strong passwords:Use a unique, secure password for your website account.

• Two-factor authentication: Enable additional login protection wherever available.

• Website access: Regularly check who has permission to access or edit your website.

• Connected applications: Review any third-party booking systems, contact forms or other integrations.

• Personal information: Make sure information submitted by families and couples is handled securely.

• Website functionality: Check that your contact forms, booking links and important pages are working correctly.

• Website content: Keep independent copies of important text, photographs and documents where possible.

It’s also worth checking that your website provider has your correct contact details so you receive important account and security notifications.

What About Other Website Platforms?

If your website uses another platform, such as Webflow, Shopify or WordPress.com, the arrangements may be slightly different.

Many managed website services handle their own infrastructure and software updates, although some allow customers to install additional applications, plugins or custom code.

These additional features may create responsibilities for the website owner.

If you’re unsure, contact your website provider and ask what security measures they manage and what you’re expected to maintain yourself.

The Important Difference

For celebrants using self-hosted WordPress, it’s particularly important to check PHP versions, WordPress updates, plugins and themes.

For celebrants using Wix, Squarespace or similar managed platforms, the provider generally handles the underlying technical updates, leaving you to concentrate on account security, connected services and protecting personal information.

Whichever platform you use, website security should form part of your regular business administration.

The important thing isn’t which website platform you’ve chosen. It’s understanding what you’re responsible for and making sure those responsibilities aren’t overlooked.

Protecting Your Website With Strong Passwords

One of the simplest ways to improve website security is to use strong, unique passwords.

Avoid passwords that contain easily guessed information, such as your business name, date of birth or common words.

A reputable password manager can help generate and store secure passwords.

Where possible, celebrants should also enable two-factor authentication.

This requires an additional form of verification when logging in, making it more difficult for someone to access your website using a stolen password.

If another person helps manage your website, provide them with their own user account rather than sharing your administrator login.

Only grant the permissions they need to complete their work.

Why Regular Website Backups Are So Important

Imagine discovering that your website has stopped working, important pages have disappeared or a security incident has damaged your website files.

Without a reliable backup, restoring your website could become difficult, expensive or even impossible.

Backups provide a way of recovering your website if something goes wrong.

Celebrants should consider using a system that:

• Creates automatic backups at suitable intervals.

• Includes both website files and the database.

• Stores copies securely away from the website itself.

• Retains more than one recent backup.

• Allows the website to be restored when necessary.

The frequency of backups should reflect how often your website changes.

For example, a website receiving bookings or online payments may require more frequent backups than a simple information website.

It’s also important to test that your backups can be restored.

Having a backup is reassuring, but knowing it works is far more valuable.

Website Hosting: What Should Celebrants Look For?

Your hosting provider is the company responsible for making your website available on the internet.

Choosing a reliable hosting provider is an important part of maintaining website security.

When reviewing your hosting arrangements, consider whether the provider offers:

• Supported and regularly updated PHP versions.

• Secure servers and appropriate security monitoring.

• SSL certificates and HTTPS connections.

• Reliable backup arrangements.

• Technical support when problems occur.

• Clear information about software updates and maintenance.

A good hosting provider should be able to explain which security responsibilities they manage and which remain your responsibility.

Don’t assume that everything is automatically updated simply because your website is working.

Protecting Personal Information and GDPR Responsibilities

Website security also forms part of responsible data protection.

Celebrants may collect names, email addresses, telephone numbers and details relating to ceremonies.

Depending on the information collected, additional data protection considerations may apply.

Under UK data protection law, businesses handling personal information must take appropriate measures to protect it.

For celebrants, this means thinking carefully about how information is collected, stored, accessed and retained.

Practical considerations include using secure contact forms, limiting access to personal information, maintaining an appropriate privacy notice and avoiding the unnecessary collection of sensitive details.

It’s also important to understand that installing an SSL certificate or security plugin doesn’t automatically make a website GDPR compliant.

Data protection involves both technical security and responsible business practices.

For further guidance, celebrants can consult the Information Commissioner’s Office at www.ico.org.uk.

Does Website Security Affect Google Rankings?

Website security and technical maintenance can also affect how people experience your website.

Google wants to direct users towards helpful, reliable content and websites that provide a good experience.

HTTPS is a recognised, lightweight Google ranking signal, while website availability, loading performance and usability can also influence the experience visitors have.

However, updating PHP or installing a security plugin doesn’t automatically improve your Google rankings.

Search engine optimisation involves several factors, including relevant content, clear website structure, helpful information and a good user experience.

For celebrants, the priority should be creating a secure, reliable website that genuinely helps families and couples find the information they need.

How Often Should Celebrants Check Their Website?

Website maintenance shouldn’t be something you only think about when a problem occurs.

A short monthly review can help identify issues before they become more serious.

Security updates, however, should be addressed promptly when they’re released, rather than waiting until the next scheduled review.

Monthly Website Security Checklist for Celebrants

• Check for WordPress updates.

• 
  

  Update installed plugins and themes.

• 
  

  Review security warnings and notifications.

• 
  

  Check your PHP version and update status.

• 
  

  Confirm that automatic backups are working.

• 
  

  Test your website contact forms.

• 
  

  Check your SSL certificate and HTTPS connection.

• 
  

  Review website user accounts and permissions.

• 
  

  Remove unnecessary plugins and themes.

• 
  

  Check WordPress Site Health for recommended improvements.

It’s also worth visiting your website as an ordinary visitor rather than only viewing it through the WordPress dashboard.

Make sure your pages display correctly on mobile phones and computers, your contact information is accurate and visitors can easily find the services you provide.

What Should You Do if Your Celebrant Website Has Been Hacked?

If you suspect that your website has been compromised, it’s important to act promptly.

Signs of a possible security incident might include unfamiliar pages appearing, unexpected redirects, unknown administrator accounts or warnings from your hosting provider.

If this happens, contact your hosting provider or a reputable website security professional.

Avoid making unnecessary changes before the problem has been investigated, particularly if those changes could remove evidence of what happened.

You may need to secure administrator accounts, identify the cause, remove malicious software and restore the website from a clean backup.

If personal information may have been compromised, you should also consider your responsibilities under UK data protection law, including whether notification to the ICO or affected individuals is required.

Not every security incident requires reporting, but suspected personal data breaches should be assessed promptly.

Professional Celebrancy Includes Responsible Business Management

At The School of Civil Celebrancy, we believe professional celebrancy involves far more than the ceremony itself.

Celebrants need to develop the skills required to communicate effectively, work sensitively with families, maintain appropriate professional boundaries and manage their businesses responsibly.

Digital security is part of that wider responsibility.

Whether you’re an experienced celebrant or someone just beginning their celebrancy journey, your website represents your business and the professional service you offer.

Keeping it secure helps protect not only your work but also the people who place their trust in you.

You don’t need to become an expert in website development, and there’s nothing wrong with asking for professional assistance.

What matters is recognising that website maintenance shouldn’t be ignored.

Frequently Asked Questions About Website Security for Celebrants

Is PHP 8.3 safe for WordPress?

PHP 8.3 remains supported for security updates until December 31, 2027. However, websites should use the latest security release within that version. PHP 8.4 or later may be preferable where the website is compatible.

Can I update PHP myself?

Many hosting providers allow customers to change PHP versions through their hosting control panel. However, it’s important to back up your website and check compatibility before making changes.

Do I need a security plugin for WordPress?

A reputable security plugin can provide additional protection, although it isn’t a substitute for secure hosting, regular updates, strong passwords and backups.

How often should I update WordPress plugins?

Check for updates regularly and install security updates promptly. Before significant updates, make sure you have a reliable backup.

Will updating PHP damage my website?

Most properly maintained websites can be upgraded successfully, but older themes and plugins may not be compatible with newer PHP versions. Testing and backups are important.

Does my celebrant website need an SSL certificate?

Yes. Your website should use HTTPS to protect information transmitted between visitors and the website. Most reputable hosting providers offer SSL certificates.

What if someone else manages my website?

Ask your website developer or hosting provider to confirm which PHP version you’re using, whether security updates are installed and how backups are managed.

Can an outdated website affect my celebrancy business?

Yes. Security vulnerabilities, technical failures and unreliable contact forms can disrupt enquiries, affect visitors’ confidence and potentially expose personal information.

Final Thoughts: A Secure Website Is Part of a Professional Celebrancy Business

When families and couples contact a celebrant, they’re placing their trust in someone to support them during an important moment in their lives.

That trust extends beyond the ceremony.

It includes how we communicate, how we manage personal information and how we maintain the systems we use to run our businesses.

Keeping WordPress updated, using a supported PHP version, maintaining security software and checking regular backups are all practical steps that can make a meaningful difference.

If you haven’t checked your celebrancy website recently, now is a good time to do so.

A little attention today could prevent a much larger problem tomorrow.

The School of Civil Celebrancy is committed to supporting professional standards in celebrancy, helping learners develop not only their ceremony skills but also an understanding of the responsibilities involved in running a professional celebrancy business.

This article provides general information about website maintenance and security. It isn’t a substitute for specialist technical, cybersecurity or legal advice. Where necessary, seek assistance from your hosting provider or an appropriately qualified professional.