Critical PHP and Node.js flaws php2shell + node2shellCritical flaws in the PHP and Node.js cores php2shell + node2shell, are your servers affected?Test my domain

WORDPRESS SCANNER · 3 CRITICAL FLAWS

WordPress scanner

Advanced check for wp2shell (CVE-2026-63030), xss2shell (CVE-2026-64638) and the CVE-2026-87902 path traversal

Flawfence: WordPress scanner

Enter your domain to start the analysis

··Authorization log retained for 12 months

Understand the flaws we detect

wp2shell (CVE-2026-63030)xss2shell (CVE-2026-64638)CVE-2026-87902 (path traversal)