Website Audit – PHP2Shell, HTTPS & Security Headers

Passive website audit: PHP2Shell/PHP version, HTTPS, headers, cookies, HTTP. Free fixes.

Check any website's PHP version in one click and find out if it is affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619) - the critical PHP vulnerability that lets attackers take over a server remotely without logging in. If your site runs on PHP - WordPress, WooCommerce, Laravel, Magento or most shared hosting - this PHP version checker tells you in seconds whether you need to act, which PHP version to upgrade to, and exactly how to do it on your hosting. ✨ WHAT YOU GET FOR FREE • One-click PHP version check for the site you are on, or any domain you type • A clear verdict: Potential risk, End-of-life PHP, No known indicators, or Unable to verify • The exact patched version you need (PHP 8.2.35, 8.3.36, 8.4.27 or 8.5.12 and newer) • End-of-life warning for PHP 8.1, 8.0, 7.4 and older, which get no official fix • "Find your PHP version in 1 minute" - free steps when the server hides its version (WordPress Site Health and common hosting panels) • Enter your version manually to finish the check • A warning badge on the icon for affected sites • Sign in for 1 free site with recheck, full hosting guides, and PDF report for that site Skip the research. Get the exact fix for your setup: • Step-by-step guides for popular hosting panels, managed WordPress hosts, and common Linux or Docker server setups • Copy-paste commands for servers, click-by-click steps for hosting panels • A ready-to-send support ticket for your host and a message for your developer • Compatibility check and rollback plan, so the PHP upgrade does not break your site • Recheck to confirm the site is fixed • PDF report (before and after) for your records, your client or your boss ✨ PREMIUM - UP TO 10 SITES For agencies, freelancers and anyone with several websites: • Monitor up to 10 sites each month • Bulk check: paste a list of domains and check them all at once • Cancel anytime ✨ SAFE BY DESIGN • Passive check only: one ordinary request to the homepage - the same as any visitor - reading the PHP version the server already shows • No exploit, payload or attack traffic is ever sent • A hidden PHP version is never reported as "safe" • Linux distribution builds are flagged for vendor confirmation instead of guessed • Minimal permissions: only the current tab when you open the extension ✨ COMMON QUESTIONS Is my WordPress site affected by PHP2Shell? Open your site, click the extension icon. If the version is hidden, go to WordPress → Tools → Site Health → Info → Server and enter the PHP version shown there. It says my PHP version is hidden. Am I safe? Not necessarily. Many hosts hide the version. Use the free 1-minute guide to find it and complete the check. I'm on shared hosting. Can I fix this myself? Usually you can switch to a newer PHP version in your hosting panel in a few clicks. Installing the patched release is your host's job - the Fix Pack includes a ticket you can send them. Will upgrading PHP break my site? Same-branch updates (for example 8.3.20 to 8.3.36) rarely break anything. Moving from PHP 7.4 or 8.1 to 8.3 can affect old plugins - every guide includes a backup, compatibility check and rollback. Does this tool hack or test my website? No. It reads what your server publicly shows, like a browser does. It never sends exploit code. ━━━━━━━━━━━━━━━━━━━━ Advisory sources: GitHub Security Advisories GHSA-w8hw-w9fx-j79w and GHSA-6wmf-4rv5-p3rp, and php.net supported versions. PHP Version Checker by Pick Ads. This extension is not affiliated with The PHP Group. The checker is a passive version check, not a full security audit. Questions: support@getpickads.com Privacy: https://getpickads.com/php2shell/privacy