php2scan

Is your website affected by PHP2Shell?

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a critical vulnerability in PHP that lets attackers run code on a web server. It affects WordPress, Joomla, Nextcloud and every other PHP site. Enter your website to see which PHP version and applications it reveals, and whether that version is patched.

The check loads your start page the same way a browser does. Abuse may be reported to the authorities.

Need more? Run it yourself.

This page checks one website at a time. The free command-line version does a lot more: whole IP ranges, a port scan, every website hosted on the same server, CSV export, and no limits. One Python file, nothing to install.

# download one file, run it
curl -LO https://github.com/akaihigurashi/php2scan/releases/latest/download/php2scan.py
python3 php2scan.py 203.0.113.0/24

# only scan systems you're allowed to test