CMS hosting

Joomla, Moodle and Drupal hosting, built for performance

Joomla 6, Moodle 5.3 or Drupal 11, pre-installed by our technicians on a server optimised for your CMS. Automatic updates and backups, no bandwidth limit, and a support team that knows your CMS, and its security flaws, inside out.

  • Pre-installed by our technicians
  • Automatic updates: security fixes land without you
  • Up to 2.5× faster with caching and the Cloudflare CDN
  • 24/7 support versed in Joomla, Moodle and Drupal
See the plans Which CMS for you?

From $11.24 a month on a 1-year plan

Three CMS, each on its own optimised server

Pick your CMS: it arrives installed, updated and backed up. Every plan hosts up to 5 websites with unlimited disk space, bandwidth and mailboxes.

Powerful and highly customisable

$16.87Save 33 %

$11.24/month excl. tax

$134.90 a year, billed annually

Order

A powerful, highly customisable CMS. Your site will last for years to come, pre-installed on a server optimised for Joomla.

  • Up to 5 websites
  • Unlimited disk space and bandwidth
  • Automatic updates and daily backups
  • Free domain name on a 1-year plan or more
Compare all plans

Online teaching platform

$16.87Save 33 %

$11.24/month excl. tax

$134.90 a year, billed annually

Order

A platform to manage and deliver remote teaching, with exchanges between students and teachers. Pre-installed so you can focus on your students.

  • Up to 5 websites
  • Unlimited disk space and bandwidth
  • Automatic updates and daily backups
  • Free domain name on a 1-year plan or more
Compare all plans

Used by very large websites

$16.87Save 33 %

$11.24/month excl. tax

$134.90 a year, billed annually

Order

Another powerful CMS, used by very large websites around the world, with a very rich choice of modules. Pre-installed on a server optimised for Drupal.

  • Up to 5 websites
  • Unlimited disk space and bandwidth
  • Automatic updates and daily backups
  • Free domain name on a 1-year plan or more
Compare all plans

Included in every plan

  • CMS pre-installed by a technician
  • Unlimited mailboxes, subdomains and forwarding
  • Free SSL certificate
  • Cloudflare CDN and DDoS attack prevention
  • One-click installer, 305 applications
  • Free migration of your existing site
  • 30-day money-back on annual plans
  • No bandwidth limit
  • Free migration

Prices exclude tax. The dedicated IP address, the Comodo SSL certificate and the installation of your own certificate are options billed per year. The money-back guarantee applies to annual contracts or longer.

Joomla hosting

Joomla hosting: Joomla 6 on a server tuned for it

Joomla 6 was released on 14 October 2025 and needs PHP 8.3 at least, with PHP 8.4 recommended. The same day, Joomla 4 stopped receiving security fixes, and Joomla 5 moves to security-only fixes from 13 October 2026. A Joomla site that does not keep pace quickly becomes a target.

At Ex2, a technician installs your Joomla in its latest stable version, on a server tuned for Joomla: URL rewriting ready for your SEF URLs, a PHP version selector to follow what Joomla 6 requires, automatic updates and daily backups. Our technicians have hosted Joomla sites for over ten years and know its extensions, its major upgrades and its pitfalls.

Current version
Joomla 6.1.4 and 5.4.9 (29 September 2026)
PHP required
PHP 8.3 minimum for Joomla 6, 8.4 recommended
Joomla 5
Security fixes until 12 October 2027
Joomla 4 and 3
No fixes at all since 14 October 2025
Moodle hosting

Moodle hosting: your learning platform, ready for the term

Moodle 5.3 LTS was released on 5 October 2026: it is the long-term support version that follows Moodle 4.5, with PHP 8.3 as a minimum, a dark mode and reworked learning outcomes. Moodle 5.0 stopped receiving security fixes on that same date, and Moodle 4.5 gets them until 4 October 2027.

A learning platform always goes down at the worst moment: the night before an exam or the first morning of term. That is why your Moodle arrives installed by a technician, with its cron task in place, unlimited disk space for your students' videos and assignments, and daily backups. Our technicians work with schools, trainers and companies that use Moodle every day.

Current version
Moodle 5.3 LTS (5 October 2026)
PHP required
PHP 8.3 minimum since Moodle 5.2, PHP 8.4 supported
Moodle 4.5 LTS
Security fixes until 4 October 2027
Moodle 5.0
No fixes at all since 5 October 2026
Drupal hosting

Drupal hosting: Drupal 11 today, Drupal 12 in December

Drupal 11 needs PHP 8.3 at least and recommends PHP 8.4 since version 11.3. Drupal 12 arrives the week of 7 December 2026, will require PHP 8.5 and will only upgrade from Drupal 11.3 or later. Drupal 10 stops being maintained on 9 December 2026, and Drupal 7 has not received a single fix since 5 January 2025.

Drupal is the CMS of large, structured sites: content types, views, editorial workflows and thousands of modules. At Ex2, a technician installs it on a server tuned for Drupal, with the PHP version selector to follow its requirements from one major version to the next, automatic updates and daily backups. Still on Drupal 7? We move your site to us for free while its upgrade to Drupal 11 is being prepared.

Current version
Drupal 11.3, PHP 8.4 recommended
Drupal 12
Week of 7 December 2026, PHP 8.5 required
Drupal 10
End of maintenance on 9 December 2026
Drupal 7
No fixes at all since 5 January 2025
2026 security

2026 security flaws: why your host has to keep a close eye on your CMS

Joomla, Drupal and Moodle publish security advisories all year round. Attackers read them too, and their bots go looking for the sites that have not kept up within hours.

A published flaw is not a technical footnote, it is a race. On 20 May 2026, Drupal published a "highly critical" advisory for an SQL injection exploitable without an account; two days later, exploitation attempts were being observed on thousands of sites. In June, a flaw rated 10 out of 10 in the JCE editor, one of the most installed Joomla extensions, allowed code to run on the server without logging in: CISA added it to its catalogue of exploited vulnerabilities in under two weeks. A site that did not apply the fix in time ends up with a backdoor, spam, or a page that sends its visitors somewhere else.

  • 48 hbetween the Drupal advisory of 20 May 2026 and the first exploitation attempts observed
  • 10/10CVSS score of the Joomla JCE flaw, added to the CISA catalogue of exploited vulnerabilities on 16 June 2026
  • 4remote code execution flaws fixed in Moodle since January 2026
Joomla
  1. 31 March 2026HighFile deletion and API endpoints

    CVE-2026-23898 and CVE-2026-23899: the update mechanism allowed arbitrary files to be deleted, and some API endpoints lacked access checks. Fixed in Joomla 5.4.4 and 6.0.4.

  2. June 2026Critical, exploitedCode execution through the JCE editor

    CVE-2026-48907, CVSS 10: a visitor who was not logged in could create an editor profile, then upload and run PHP. Fixed in JCE 2.9.99.5 on 3 June; added to the CISA catalogue of exploited vulnerabilities on 16 June.

  3. 29 September 202616 fixesTwo-factor authentication bypass

    Joomla 6.1.4 and 5.4.9 fix 16 flaws, including a two-factor authentication bypass through the "remember me" cookie (CVE-2026-92227) and account creation without being logged in (CVE-2026-90907).

Moodle
  1. January 2026SeriousCode execution through a backup restore

    MSA-26-0001 (CVE-2026-26045): a crafted backup file could run code on the server when restored. Fixed in Moodle 5.1.2, 5.0.5 and 4.5.9.

  2. 29 April 2026SeriousCode execution through the Google Drive repository

    MSA-26-0006 (CVE-2026-7275), published alongside an SQL injection in external database authentication (CVE-2026-7274). Fixed in Moodle 5.1.4, 5.0.7 and 4.5.11.

  3. 8 June 2026SeriousCode execution through admin presets import

    MSA-26-0015 (CVE-2026-58334): importing admin presets could run code. Fixed in Moodle 5.2.1, 5.1.5, 5.0.8 and 4.5.12. Moodle 5.0 has received no fixes since 5 October 2026.

Drupal
  1. 15 April 2026CriticalCross-site scripting in dialog boxes

    SA-CORE-2026-001 (CVE-2026-6365): core's AJAX modal dialogs did not sanitise some options enough. Fixed in Drupal 10.5.9, 10.6.7, 11.2.11 and 11.3.7.

  2. 20 May 2026Highly critical, exploitedSQL injection without an account (PostgreSQL)

    SA-CORE-2026-004 (CVE-2026-9082), rated 23 out of 25: a crafted request was enough to read or alter the database of a site running PostgreSQL. Exploitation attempts were observed from 22 May, more than 15,000 within days according to Imperva.

  3. December 2026End of supportDrupal 10 ends, Drupal 12 arrives

    Drupal 10 stops being maintained on 9 December 2026; Drupal 12 ships the same week and requires PHP 8.5. Drupal 7, for its part, has not received a single fix since 5 January 2025.

Not an exhaustive list, as of 7 October 2026. The full advisories are published by each project's security team: Joomla, Drupal, Moodle.

What changes at Ex2

A host that keeps up with your CMS means fewer headaches

You do not have to watch the Joomla, Drupal or Moodle security advisories in the evening after work. Ex2's CMS plans are built so that the fix gets there before the bot does.

  • Automatic updates: the CMS security fixes are applied without you having to think about it

  • Daily backups to roll back if an update, an extension or an attack breaks something

  • Maintained PHP versions: the PHP selector follows what Joomla 6, Moodle 5.3 and Drupal 11 require

  • CloudLinux isolation, Cloudflare and anti-DDoS: a compromised neighbour cannot reach your site, and automated scans are filtered in front of the server

  • Support that reads the advisories: 24/7, versed in all three CMS and their major upgrades

See the plans Compare all the plans

CMS hosting features we guarantee

Security, simplicity and speed, on every plan.

Security is our priority Our servers are designed to protect your CMS against DoS and other common malicious attacks, with CloudLinux isolation and DDoS prevention.
Simplicity of use Your CMS and all its features come pre-installed by a technical expert, including automatic updates and free backups.
Supersonic speed Load speeds up to 2.5 times faster with our low-density servers, several caching layers and the Cloudflare CDN.

We love CMS

We do our best to offer you a reliable, fast and secure platform for your CMS, whether it is Joomla, Drupal or Moodle. Our technicians are passionate about free software and love to roll up their sleeves to help with the most improbable bugs. Each CMS needs a specially optimised server, and that is exactly what we do at Ex2.

  • One server tuned per CMSJoomla, Moodle and Drupal each run on a server configured for their needs, not a generic stack.
  • Help available any timeOur technical support is well versed in Moodle, Joomla and Drupal. Time is money: we are available 24/7/365 with precise answers.
  • Free migration, welcome homeA Joomla, Drupal or WordPress site hosted elsewhere? We transfer it to Ex2 for free, so you start off on the right foot.
  • WordPress tooWordPress has its own hosting at Ex2, with the same care: see our WordPress hosting page.

Which CMS is right for you?

Three mature, free CMS. Here is what each one does best.

Joomla

Business and association websites

A flexible CMS with strong multilingual support and fine-grained user permissions, a good fit for sites with several contributors.

  • Multilingual sites out of the box
  • Thousands of extensions
  • Detailed user groups and permissions
Order Joomla

Moodle

Schools, trainers and companies

The reference open-source learning platform: courses, quizzes, forums, grades and certificates for your students or employees.

  • Courses, quizzes and assignments
  • Grades, badges and certificates
  • Forums and messaging between students and teachers
Order Moodle

Drupal

Large and structured websites

Used by very large websites around the world, Drupal shines on complex content models, custom workflows and a very rich choice of modules.

  • Custom content types and views
  • Editorial workflows
  • A very rich choice of modules
Order Drupal

Free migration. Welcome home!

Your files, database, mailboxes and settings move to Ex2 while your site stays online at your old host. The DNS only switches once you have checked everything.

How the migration works

  1. 1
    You send the accessOpen a migration request and tell us where your Joomla, Drupal or WordPress site is hosted today.
  2. 2
    We move everythingOur team transfers your files, database, email accounts and settings to your Ex2 plan.
  3. 3
    You check, then we switchYou test your site on the new server before the DNS points to Ex2. Nothing goes offline in between.
  • Free, with no catchThe migration of your existing site is included with every CMS plan.
  • Subject to available accessWe need a way in to your current hosting. Tell us what you have and we plan the move with you.
Request a migration

What our customers say

Rated 5.0 out of 5 on Google from 272 reviews. Read them for yourself.

★★★★★

“The service is flawless. As a pro photographer I need a fast, reliable site — and that’s exactly what I get. Tech support is accessible and very responsive.”

SB Secret BoudoirPhotographer · since 2014
★★★★★

“I’ve built sites for SMBs for 15 years. Since trying Ex2 I moved everything over. A ticket on Sunday at 11:40 PM and 10 minutes later I have my answer.”

CL ChainloverWeb designer · since 2016
★★★★★

“I’ve used Ex2 for years. The breadth of applications is excellent, value for money very competitive, and support is available 24/7.”

CM Christian M.Entrepreneur · since 2018
5.0/5
Google rating, 272 reviews
10+
Years of web hosting
24/7
Bilingual support
305
Applications in one click

Help available any time

24/7

support in French and English, 365 days a year

A team versed in Moodle, Joomla and Drupal.

CMS questions

Installation, updates, extensions or modules: precise answers from technicians who use these CMS daily.

Hosting questions

Email, DNS, SSL, PHP versions and backups, around the clock, by ticket or chat.

Knowledge base

Guides on first login, extensions, caching and the most common Joomla, Moodle and Drupal questions.

Free migration

Our team moves your existing site to Ex2 at no cost.

Four layers around your CMS

Servers designed to protect your CMS against DoS and other common attacks, from the network to the file system.

  1. 01

    Daily backups

    Automated backups of your site, restored on request by our support.

  2. 02

    CloudLinux isolation

    Every account runs in its own isolated environment: a neighbour cannot slow down or reach your site.

    CloudLinux
  3. 03

    DDoS prevention

    Protection against DoS and DDoS attacks, active on every plan.

  4. 04

    Cloudflare CDN

    Cloudflare's network in front of your site: faster pages and a first filter against malicious traffic.

    Cloudflare
DDoSXSSMalwareBotBrute forceSQLiYour CMSCloudLinuxAnti-DDoSCDNBackups
Threat detectedThreat blockedLive monitoring 24/7

The three plans, side by side

Features and technical details of the CMS hosting plans.

Show the full comparison
JoomlaMoodleDrupal
Disk spaceUnlimitedUnlimitedUnlimited
BandwidthUnlimitedUnlimitedUnlimited
Websites555
Free domain name1-year plan or more1-year plan or more1-year plan or more
Email accountsUnlimitedUnlimitedUnlimited
SubdomainsUnlimitedUnlimitedUnlimited
Domain forwardingUnlimitedUnlimitedUnlimited
Free SSL certificateyesyesyes
Premium Comodo SSL certificate$29.99 a year, as an option$29.99 a year, as an option$29.99 a year, as an option
Installation of your own SSL certificate$9.99 a year, as an option$9.99 a year, as an option$9.99 a year, as an option
Dedicated IP address$4.49/month + $22.49 setup fees$4.49/month + $22.49 setup fees$4.49/month + $22.49 setup fees
Automatic CMS updatesyesyesyes
Automated website backupsyesyesyes
PHP version selectoryesyesyes
GZIP compressionyesyesyes
Memcached cachenonono
Ex2 site builderyesyesyes
One-click installer (305 applications)yesyesyes
Cloudflare CDNyesyesyes
DDoS attack preventionyesyesyes
CloudLinux OS protectionyesyesyes
File manageryesyesyes
Account statisticsyesyesyes
Graphical web statistics (AWstats)yesyesyes
Website migrationFreeFreeFree
Knowledge baseyesyesyes
24/7 email supportyesyesyes
Dedicated live chat supportnonono
Money-back guarantee30 days on annual contracts30 days on annual contracts30 days on annual contracts
OrderOrderOrder

Need something a little different?

WordPress has its own hosting, and a website can also be built without any CMS.

WordPress hosting WordPress installed and optimised, with the same care as our CMS plans. See WordPress hosting AI website builder A website or an online store built in minutes, no CMS to manage. See the website builder Green web hosting cPanel hosting for any website, with email, SSL and backups. See web hosting

Your questions, our answers

Is the CMS really pre-installed?

Yes. Joomla, Moodle or Drupal is installed by one of our technicians on a server optimised for that CMS. You receive your admin credentials by email and can start publishing right away.

Who takes care of updates?

Updates are automatic, and backups of your site run daily at no extra cost.

How many websites can I host?

Up to 5 websites per plan, with unlimited disk space, bandwidth, mailboxes and subdomains.

Do you host WordPress on these plans?

WordPress has its own hosting page at Ex2, with plans optimised for it. The CMS plans are for Joomla, Moodle and Drupal.

Is the migration of my existing site free?

Yes. Whether your Joomla, Drupal or WordPress site is hosted elsewhere, we transfer it to Ex2 for free. Contact us and we prepare everything.

Is an SSL certificate included?

Yes, a free SSL certificate comes with every plan. A premium Comodo certificate and the installation of your own certificate are available as yearly options.

Can I get a refund?

Yes, within 30 days on annual contracts or longer.

Which payment methods do you accept?

Credit cards (Visa, Mastercard), PayPal, bank transfers and Chorus Pro payments for public administrations.

Why choose Ex2 as your Joomla host?

Because a technician installs Joomla on a server tuned for it, with PHP 8.3 or 8.4 for Joomla 6, automatic updates, daily backups, the Cloudflare CDN and 24/7 support that knows Joomla and its extensions. Migrating your existing Joomla site is free.

Which PHP version do Joomla 6, Drupal 11 and Moodle 5.3 need?

Joomla 6 needs PHP 8.3 at least and recommends PHP 8.4. Drupal 11 needs PHP 8.3 and recommends PHP 8.4 since version 11.3; Drupal 12, due in December 2026, will require PHP 8.5. Moodle 5.3 LTS needs PHP 8.3 at least and supports PHP 8.4. The PHP version selector in your plan lets you pick the right one.

What happens when a security flaw is published for my CMS?

Your CMS updates are automatic: the fix is applied without you having to step in, and your daily backups let you roll back if an update causes trouble. Third-party extensions and modules, however, update from your CMS admin: the JCE flaw of June 2026 is a reminder that they are fixed separately from the Joomla core. Our 24/7 support answers your questions about the advisory concerned.

My site is still on Joomla 3 or 4, or on Drupal 7: can you host it?

Yes, and we migrate it for free. But those versions no longer receive any security fixes: Joomla 4 since 14 October 2025, Drupal 7 since 5 January 2025. We recommend planning the move to Joomla 6 or Drupal 11; our knowledge base and our support help you prepare it.

Your CMS, installed and ready

Joomla, Moodle or Drupal on an optimised server, with updates, backups and 24/7 support.

Order Joomla hosting Compare the plans