PHP2Shell Check

PHP2Shell Check is a free checker. You enter a website and it reads the public response headers to report the PHP version, then says whether the site is patched, vulnerable or end-of-life. It covers CVE-2026-109618 and CVE-2026-109619 (both CVSS v4.0 9.2) and lists the patched releases: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. PHP 8.1 and older are end-of-life.

There is no signup and nothing is stored. A manual version dropdown is offered when a site hides its version. Results rely on the version string, and hosts may backport fixes without changing it. Not affiliated with The PHP Group.