PHP2Shell statement record · Host
Cloudflare's PHP2Shell statement is recorded as mitigation only, with statement date printed as ; read the published statement.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Submit a correction or your statement Get the badge All statements
Publish or update your statement. The statement submission is free.
See what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about you: the $490 PHP2Shell Record Check.
We capture the dated answers, trace wrong or missing statements to their sources and deliver a statement page in the format the engines quote.
Agencies: white-label PHP2Shell Record Check, $490 per client report.
Read the statement on blog.cloudflare.com, dated . Source type: official page.Cloudflare customers using our free or paid WAF were protected by default against php2shell
Cloudflare customers using our free or paid WAF were protected by default against php2shell
(from October 21 at 3:02 am UTC) and Customers should patch their PHP repos even with WAF protections
quoted from https://blog.cloudflare.com/php-vulnerabilities-waf-protection/ (title: Cloudflare deploys protections against php2shell vulnerability; authors Daniele Molteni, Dan Jones, Kuber Nandwani). New rules in the Cloudflare Managed Free Ruleset and Cloudflare Managed Ruleset plus a response-side full transaction rule for all plans; the post does not say whether Cloudflare's own services run PHP or are affected and names no fixed PHP version.
AI answers not yet measured
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
The badge for Cloudflare reads PHP2Shell statement listed, Verified 24 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
Cloudflare's PHP2Shell statement is recorded as mitigation only, with statement date printed as October 21, 2026; source: https://blog.cloudflare.com/php-vulnerabilities-waf-protection/.
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Last refreshed .
PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy