METATRONKERNEL
Request

PHP2Shell · CVE-2026-109618 · CVE-2026-109619

Is your website patched against PHP2Shell?

Two critical flaws in PHP became public on 21 October 2026. Attacks started within hours, and some governments took sites offline. WordPress, Drupal, Joomla, Magento and Laravel all run on PHP. Updating WordPress does not close this hole. Only the PHP update does.

  • 21 OctFlaws became public
  • HoursUntil attacks began
  • 1 dayWe check and update PHP

The check

Is my site open? Find out.

Leave your website address and your email. We check it and get back to you with a plain answer: patched or not, and what we changed.

We use your email only to answer this request. Privacy

How it works

Three steps, one day

  1. 1

    You send the address

    Only the website address. No access, no password.

  2. 2

    We check the PHP version

    We read which PHP version runs behind your site and compare it with the fixed versions.

  3. 3

    You get the answer

    Patched or not. If not, we update PHP and tell you what we changed.

Price

Fixed prices, per website

The quick answer, patched or not, is free. For more, you choose.

  • Written check with findings: €290 net
  • Check and PHP update in one day: €490 net
  • PHP older than 8.2: on request

For the update we need access to your hosting. We ask for it only after you agree to the price.

Fixed versions

These PHP versions are safe

They close CVE-2026-109618 and CVE-2026-109619.

  • PHP 8.5.12
  • PHP 8.4.27
  • PHP 8.3.36
  • PHP 8.2.35

Sources

Read it from the press

Prepared with AI by Metatron Marketing (EU AI Act Art. 50).