Is my PHP version affected by PHP2Shell? Version check

Version checkRuns in your browser

Output of php -v, or a version number

Example. Replace it with your own output

Affected. Upgrade to 8.3.36.

Then restart every PHP worker.

php -v shows the command-line build. Your web server may run a different one. Ask php-fpm8.3 -v, or open phpinfo() through the site.

Steps for PHP 8.3

Fixed releases21 Oct 2026

PHP 8.58.5.12

PHP 8.48.4.27

PHP 8.38.3.36

PHP 8.28.2.35

PHP 8.1source backport

PHP 8.0source backport

PHP 7.4source backport

PHP 7.3 and olderno fix

Where to find the version

Linux server, shell access

This shows the command-line build. Ask the web SAPI as well, because the FPM binary often has a version suffix in its name.

php -v
php-fpm8.3 -v   # Debian and Ubuntu name it after the branch
php-fpm -v      # Red Hat family, Alpine, Docker

WordPress

Tools › Site Health › Info › Server › PHP version. This is the PHP that actually serves the site.

wp --info   # WP-CLI; prints the PHP binary and version it runs with

Docker

The tag says what you asked for. The container says what you got.

docker exec <container> php -v

Windows

Run it in the folder PHP is installed in, or anywhere if php.exe is on the PATH.

php.exe -v

On shared hosting the control panel shows the version per domain. Our host pages say where to find it at each host.

When the number looks old but may be fixed

Distributions copy the fix into their own builds and keep their own numbering. 8.3.6-0ubuntu0.24.04.x or 8.2.32-1~deb12u2 can be fixed even though the upstream fix is 8.3.36 or 8.2.35. The check can’t tell. The package changelog can. Pick your source: