PHP Version Checker – PHP2Shell & Vulnerability Check

Check PHP versions for PHP2Shell risk. Find patched releases and hosting fixes. Passive checks only, no exploit traffic.

Check any website's PHP version in one click and find out if it is affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619) - the critical PHP vulnerability that lets attackers take over a server remotely without logging in. If your site runs on PHP - WordPress, WooCommerce, Laravel, Magento or most shared hosting - this PHP version checker tells you in seconds whether you need to act, which PHP version to upgrade to, and exactly how to do it on your hosting. ✨ WHAT YOU GET FOR FREE • One-click PHP version check for the site you are on, or any domain you type • A clear verdict: Potential risk, End-of-life PHP, No known indicators, or Unable to verify • The exact patched version you need (PHP 8.2.35, 8.3.36, 8.4.27 or 8.5.12 and newer) • End-of-life warning for PHP 8.1, 8.0, 7.4 and older, which get no official fix • "Find your PHP version in 1 minute" - free steps when the server hides its version (WordPress Site Health and common hosting panels) • Enter your version manually to finish the check • A warning badge on the icon for affected sites • Sign in for 1 free site with recheck, full hosting guides, and PDF report for that site ✨ FIX PACK - ONE-TIME, FOR ONE SITE Skip the research. Get the exact fix for your setup: • Step-by-step guides for popular hosting panels, managed WordPress hosts, and common Linux or Docker server setups • Copy-paste commands for servers, click-by-click steps for hosting panels • A ready-to-send support ticket for your host and a message for your developer • Compatibility check and rollback plan, so the PHP upgrade does not break your site • Recheck to confirm the site is fixed • PDF report (before and after) for your records, your client or your boss ✨ PREMIUM - UP TO 10 SITES For agencies, freelancers and anyone with several websites: • Everything in the Fix Pack for up to 10 sites each month • Bulk check: paste a list of domains and check them all at once • One page with the PHP status of every site • PDF report for each site • Cancel anytime ✨ SAFE BY DESIGN • Passive check only: one ordinary request to the homepage - the same as any visitor - reading the PHP version the server already shows • No exploit, payload or attack traffic is ever sent • A hidden PHP version is never reported as "safe" • Linux distribution builds are flagged for vendor confirmation instead of guessed • Minimal permissions: only the current tab when you open the extension ✨ COMMON QUESTIONS Is my WordPress site affected by PHP2Shell? Open your site, click the extension icon. If the version is hidden, go to WordPress → Tools → Site Health → Info → Server and enter the PHP version shown there. It says my PHP version is hidden. Am I safe? Not necessarily. Many hosts hide the version. Use the free 1-minute guide to find it and complete the check. I'm on shared hosting. Can I fix this myself? Usually you can switch to a newer PHP version in your hosting panel in a few clicks. Installing the patched release is your host's job - the Fix Pack includes a ticket you can send them. Will upgrading PHP break my site? Same-branch updates (for example 8.3.20 to 8.3.36) rarely break anything. Moving from PHP 7.4 or 8.1 to 8.3 can affect old plugins - every guide includes a backup, compatibility check and rollback. Does this tool hack or test my website? No. It reads what your server publicly shows, like a browser does. It never sends exploit code. ━━━━━━━━━━━━━━━━━━━━ Advisory sources: GitHub Security Advisories GHSA-w8hw-w9fx-j79w and GHSA-6wmf-4rv5-p3rp, and php.net supported versions. PHP Version Checker by Pick Ads. This extension is not affiliated with The PHP Group. The checker is a passive version check, not a full security audit. Questions: support@getpickads.com Privacy: https://getpickads.com/php2shell/privacy