A server administrator uses EasyApache 4 to select and install packages and PHP versions available to the server. The software draws on package repositories and profiles rather than treating each website as an isolated PHP installation.
EasyApache packages can have their own package names and update schedules. On supported setups, additional PHP streams may come from vendors that offer maintenance for older versions. That means an upstream PHP version string alone may not describe the security status of a particular EasyApache build.
EasyApache 4 also differs from MultiPHP Manager. The former provisions available software, while the latter assigns an installed PHP version or handler to an individual domain. Installing a corrected build does not guarantee that every website has switched to it.
During patching, check both the available package builds and the selected PHP handler for each affected domain. Apply supported updates, replace any old workers and verify the running service.