PHP security
PHP vulnerability check: is your website affected?
PHP published fixes for CVE-2026-109618 and CVE-2026-109619. Here is how to find out whether your site runs an affected PHP version – and what to do next.
One click shows whether your PHP version is affected.
Which PHP versions are affected?
All supported PHP branches below these fixed releases are affected:
| Branch | Fix included |
|---|---|
| PHP 8.2 | from 8.2.35 |
| PHP 8.3 | from 8.3.36 |
| PHP 8.4 | from 8.4.27 |
| PHP 8.5 | from 8.5.12 |
Older branches such as PHP 8.1, 8.0 or 7.x no longer receive official security updates and should be treated as at risk. Details: PHP vulnerabilities.
Three steps to safety
- Check: enter your domain – PHP Checker looks for public version hints.
- Confirm: if unclear, enter the version or use the verification file.
- Fix: the wizard shows steps for shared hosting, Plesk, cPanel, Debian/Ubuntu, RHEL or Docker – then re-check.
What the check cannot do
PHP Checker evaluates version hints. It does not investigate whether a server has already been compromised, and a missing hint does not prove a site is safe.
Prefer hands-on help? Denkcode can do the update for you.