Ploi's PHP2Shell statement is recorded as customer must update, with statement date printed as 21:32 CEST, Oct 21, 2026; read the published statement.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
PHP released the fixes today in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35.Press Patch in the PHP tab of your server (or Manage → Updates → Run now) PHP 8.1 and older get no official release.Upgrade those applications to PHP 8.4 or 8.5. quoted from https://status.ploi.io/status-page/ploi/history (notice: Critical PHP vulnerabilities, 21:32 CEST, Oct 21; no permalink). Ploi is a server management panel: customers patch their own servers; builds were lagging (The package builders are still catching up with demand.) with packages.sury.org suggested; a marketplace script turning off session.upload_progress.enabled is offered as a partial mitigation, not a fix.
Change log
: first check
: Published statement excerpt reverified; classification unchanged.
: Source-only recheck completed; published classification unchanged.
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for Ploi reads PHP2Shell statement listed, Verified 24 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
The status records what the company published, under our statement status rules. A PHP version mentioned in a statement can be guidance for other organisations; the statement and notes explain its scope.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.