Website Without PHP
US
Menu

PHP problems fixed, without the panic

Is your website broken, or running on outdated software that puts it at risk? We explain in plain language what is going on and what to do now. A person replies within one business day.

Check your site belowSee our services

One team for the emergency and the cure

Website Without PHP is a service of Monkey Vision B.V. in Nijmegen. We fix what is urgent, then remove the cause so the same scare does not come back.

A free check that only reads what your site shows in public

The PHP Exposure Check only looks at what your site already tells every visitor, such as the PHP version it shows. It never logs in and never scans for weaknesses. You see which version you run and whether it still receives security fixes, before you talk to anyone. Where the version is not visible, we tell you so instead of guessing.

PHP2Shell: the current status

Status: fixed releases available, update nowLast update:

The short version. Every line has its source and the time we checked it.

Fixed releases
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35Source: php.net security advisory, checked
PHP 8.1 and older
No more updates from the PHP project. Assume these versions are affected too.Source: php.net security advisory, checked
Exploitation in the wild
Not confirmed by php.net or CISA (KEV). Cloudflare reports attack traffic, watchTowr (via The Register) sees exploitation attempts and CERT-EU reports circulating proof-of-concept code; none of these sources confirms successful exploitation.Source: CISA KEV, checked

Full status, timeline and sources

  1. Domain
  2. Check
  3. Result
  4. Report

Which PHP version does your site run?

Enter your domain. We read only what your site already sends in public: the headers and the top of the homepage. No scan, no login. We keep the domain and the result, never your IP address.