PHP2Shell Vulnerability Check
Are your PHP systems secure?
Criticality: 3 / Orange | There’s no time to wait. Assess what action you need to take now and find out how to reliably implement security updates.
Vulnerable services
WordPress
The world’s most widely used CMS, powering around 40 per cent of all websites
Nextcloud
Self-hosted cloud for files and collaboration, often accessible directly via the internet
Matomo
Privacy-friendly analytics solution, typically accessible to the public
phpMyAdmin
Widely used database interface, frequently left open on the web through negligence
GLPI
IT asset and service management, widely used by small and medium-sized enterprises
Dolibarr
ERP and CRM for small and medium-sized enterprises
Roundcube
A widely used webmail client offered by many hosting providers
phpBB
Classic forum software with many legacy installations
BookStack
Wiki and documentation, often accessible both internally and externally
Firefly III
Self-hosted financial management system containing sensitive personal data
Moodle
Widely used learning platform in schools, universities and businesses
Many others
Home-grown solutions based on PHP or NodeJS