PHP2Shell security updates are available. About PHP2Shell ↗
PHPCheck
← Check my website

How to check your website’s PHP version

Reviewed 22 October 2026 · PHPCheck

Find the PHP version running your website and check whether it needs an update.

Check my website →

Start with a website check

Enter your website address in PHPCheck. If your website shares its PHP version, we compare it with the published PHP2Shell fixes.

Check your hosting account

Your website host is the company that keeps your website online. Look in its control panel for PHP settings for your website. In WordPress, the Site Health page may also show the PHP version.

Ask your website host

  1. Which PHP version is running my website?
  2. Are the fixes for both PHP2Shell issues installed, including any security fixes supplied by the host?
  3. If an update is needed, can you back up the website, check that it works with the update, and confirm the update is running?

What if the PHP version is hidden?

That is common. Your host can confirm the version and updates. Hiding a version does not install a security fix.

WordPress and plugin versions are different from PHP. Updating a plugin does not necessarily update PHP.

Technical details

PHP may be listed in X-Powered-By or Server response headers. These can be hidden or changed and do not prove which fixes are installed. The PHP version in a command-line tool can differ from PHP-FPM or Apache serving the website.

Avoid publishing a phpinfo page: it can expose private settings. Use your hosting panel or private administrator tools. Ask the host to verify package details, fixes for both CVEs, and that all PHP workers use the updated build.

Check my website →

Sources