PHP Security Status: what is confirmed, by whom, and when
Every fact on this hub lists its source and the time we checked it.
Which PHP version does your site report?
We read only what your site already sends in public: the headers and the top of the homepage. No scan, no login.
More about this
Open questions stay visible instead of being guessed.
- Step 1 Your site runs on PHP A version without the latest fix carries this risk.
- Step 2 The PHP project reports the flaw php.net, 21 October 2026
- Step 3 Your host or we update PHP To a fixed release: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35
- Step 4 The fix is in Then confirm the version: with the check if your site reports it, otherwise with your host. Up to date
Current status pages
PHP2Shell: the PHPPHP is a programming language that builds your web pages on the computer that hosts your site, just before they reach the visitor. WordPress runs on it. project released fixed versions on 21 October 2026. See also which PHP versions are supported today.
- PHP2ShellLive status of the PHP2Shell vulnerabilities: what is confirmed, by whom and when.
- Myths and factsRumours sorted from confirmed facts
- Explained in plain languagePHP2Shell without jargon, in five minutes
- Which PHP Versions Are Supported Right NowPHP end of lifeEnd of life (EOL) means the makers have stopped looking after a version of software. It still works, but it no longer gets updates, not even security fixes. explained: which PHP versions still get security fixes, according to php.net on 21 October 2026. Source named, open questions listed.
Share this page
Ask your AI to explain
Opens the chat with a question about this page. An AI answer can differ; the sources above are leading.
This question is sent along: Summarise the confirmed facts on https://websitewithoutphp.com/en-gb/security-status/ in 5 short points, with the source per point.
- Domain
- Check
- Result
- Report
We are checking
We only read what your site already sends in public. This takes a few seconds.
- Looking up the domain
- Connecting to your site
- Reading the headers
- Identifying the platform
- Identifying the CDN or firewall
Adds platform, firewall or CDN, hosting and your previous scan. We add your result to the form. A person replies within 1 working day.
Details
- Website
- PHP
- PHP version
- Checked
Headers we looked at
What this does not tell you
Read how to find your PHP version yourself
Ask your hosting provider
Copy this question and send it to your hosting provider or developer. You do not need to give us an email address for this.
Which PHP version does this website use, and how do I check that in my hosting panel?
Where should we send your report?
You see the report below. The email version, ready to forward to your web developer, follows.
Your full report
- Website
- PHP
- PHP version
- Platform
- Firewall/CDN
- Hosting
- Previous scan
We add your result to the form. A person replies within 1 working day.