Critical PHP flaw php2shell (CVE-2026-109618)Test my domain
Logo
FLAWFENCE

Our free scanners

Pick a target. The scanner situates your host against a recent flaw, with passive reads.

GitLab scan

New

GitLab instances

  • Version placed in the security-release history
  • CVE-2026-85706, CVE-2026-93577, CVE-2026-97229
  • Passive read, no payload sent

php2shell scan

New

PHP servers

  • PHP version read from the headers
  • CVE-2026-109618 and CVE-2026-109619
  • Passive read, no payload sent

2shell scan

WordPress sites

  • Core version, batch route, login screen
  • wp2shell, xss2shell (CVE-2026-64638), CVE-2026-63030
  • Runs in the browser, one benign probe