PHP and WordPress Security Check
LIVEIs your website patched for PHP2Shell? We check and fix it.
On October 21, 2026, PHP released emergency fixes for two critical flaws known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) that can let an attacker run code on a web server without logging in. WordPress, WooCommerce and most small-business websites run on PHP. Our $149 Security Check confirms which PHP version your site runs, whether your host has applied the fix, and whether WordPress core and plugins are current, with a written report in 48 hours. For $399 we also apply the update, or work it through with your host until it is done.
LOOT · WHAT YOU GET
- PHP version and patch status confirmed (fixed releases are 8.2.35, 8.3.36, 8.4.27 and 8.5.12, or a vendor backport)
- WordPress core, theme and plugin update review
- Temporary hardening if your host cannot patch yet
- Written report in 48 hours, in plain English
- $399 option: we apply the fix or handle it with your host
- Optional $49 a month monitoring afterward
FAQ · ASK THE INNKEEPER
Is my website affected by PHP2Shell?
Any website running PHP 5.4 or later can be, including WordPress, WooCommerce, Drupal and Joomla sites. The fix is a PHP update from your host or server admin. The fixed releases are PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12; older versions need a backport from your host or Linux vendor.
Does this check tell me if my site was hacked?
The check confirms whether the fix is in place and your software is current. It is not a forensic investigation. If we see signs of a compromise, we tell you and quote the cleanup separately.
What do you need from me?
Your website address. For the $399 fix, access to your hosting panel or a contact at your hosting company.
How much does it cost?
$149 for the check, $399 for the check plus the fix, and $49 a month if you want us to keep watching your site after.
Ready to get started?
Book a 30-minute discovery call and we'll map out your goals, timeline, and budget.
Schedule a call →MORE SERVICES FROM GOALS AND GAMBLES
Software Engineering
End-to-end web, mobile, and backend software built on modern frameworks.
ENTERCorp-to-Corp Consultancy
Corp-to-corp software and data-engineering consulting for enterprises and regulated industries.
ENTERData Engineering & Analytics
ETL pipelines, data lakes, lakehouse/medallion architecture, dashboards, and ML-ready data.
ENTER