Craft CMS's PHP2Shell statement is recorded as patched partly, with statement date printed as ; read the published statement.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
Save for a small handful of sites with preexisting build issues, at this point all Cloud environments have now been updated to the new images Official Craft Cloud post explicitly retains exceptions for a small handful of sites with preexisting build issues. The classification is corrected to patched partly to preserve that stated scope. Self-hosted Craft installations are not covered by this Cloud statement.
Change log
: first check
: Primary-source scope review: classification changed from patched to patched partly. Current source scope and product qualifications are recorded in notes.
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for Craft CMS reads PHP2Shell statement listed, Verified 24 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.