Is your site exposed to PHP2Shell?

In October 2026 two critical PHP flaws, nicknamed PHP2Shell, were disclosed that let attackers run commands on the server over the internet — and exploitation attempts are already underway. Fixed in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12; PHP 8.1 and older get no new release. Paste your URL below to see whether your server announces an affected version.