PHP CVE Radar

Automatically shows a friendly page notice about possible PHP security updates. Cannot confirm vulnerability or safety.

PHP CVE Radar shows a clear notice at the top of a webpage when it finds signs that the website uses PHP. You don't need to click the extension to see the notice. When a site reports a recognizable PHP version, the extension compares it with the bundled advisory rules for CVE-2026-109618 and CVE-2026-109619, covered by CERT-EU advisory 2026-018. The notice explains what a possible security issue could mean for the information you share with that website. An optional More link shows the evidence, limitations, and official sources. - Automatic notices when PHP indicators are found. - Plain-language explanations for everyday visitors. - Reported PHP versions when available, with uncertainty clearly explained. - Links to official PHP and CERT-EU information. - Dismissible notices and an optional toolbar panel with more evidence. 0 All checks run locally. No accounts, analytics, advertising, or remote scanning. To provide these notices automatically, the extension reads the current webpage's response headers, address, selected generator metadata, and script/stylesheet paths. It temporarily keeps a minimal observation for each tab in Chrome's session storage. It does not send these observations to the publisher or any third party, and it does not read forms, passwords, or cookie values. Important limitations: a browser cannot confirm a server's patch status. Version information may be hidden or inaccurate, and some sites install fixes without changing their reported version. A warning does not mean a site has been hacked. No notice does not mean a site is safe. PHP CVE Radar does not block attacks, fix websites, or detect every PHP installation or security issue. This release contains a bundled snapshot of the two advisories, reviewed October 21, 2026. It is not a live feed of all PHP CVEs; updated rules require a new extension release. PHP CVE Radar is an independent project and is not affiliated with PHP, CERT-EU, or Google. Support: freddymontes+chrome@gmail.com