Version check
Paste php -v or type a version and see whether it includes the fix. It runs in your browser and sends nothing. To link to a prefilled result, add ?v=:
https://php2shell.dev/check?v=8.3.30Status as JSON
One static file with the CVEs, the fixed release for each branch, which branches only have source backports and the sources we used. It changes when the facts change, and every change goes into the changelog. Cache it as long as you like. There is no rate limit, because no server sits behind it.
curl -s https://php2shell.dev/api/status.json | jq '.branches[] | {branch, fixed, kind}'Fields: checkedAt, releasedOn, cves[], branches[] (branch, fixed, kind as release, backport or none, supportEnds, page), sources[] and openQuestions[]. When we cannot confirm a value, the field is null. We do not guess.
RSS
Every change to the facts, newest first: /feed.xml. Add it to a feed reader or to a chat channel that reads RSS.
Badges for a README or status page
Static SVG files. They show the fixed release and know nothing about your version, so add a line saying what you run.
[](https://php2shell.dev/status)One badge per branch:
https://php2shell.dev/badge/php-8-5.svg
https://php2shell.dev/badge/php-8-4.svg
https://php2shell.dev/badge/php-8-3.svg
https://php2shell.dev/badge/php-8-2.svg
https://php2shell.dev/badge/php-8-1.svg
https://php2shell.dev/badge/php-8-0.svg
https://php2shell.dev/badge/php-7-4.svg
<a href="https://php2shell.dev/status"><img src="https://php2shell.dev/badge/php-8-3.svg" alt="PHP 8.3: needs 8.3.36 or later" height="22"></a>WordPress Site Health plugin
A small plugin that adds one test to Tools › Site Health. It compares the PHP that serves your site with the fixed releases and reports good, recommended or critical. It makes no network requests. The fixed versions are written into the plugin, so update it when we do.
How to install it and what each result means: the plugin page.