Skip to content

v1.0.0: PHP2Shell checker with branded HTML reports

Choose a tag to compare

@CompleteDotTech CompleteDotTech released this 22 Oct 00:09
· 63 commits to main since this release
d605f46

First tagged release of php2shell-check under CompleteTech LLC.

Highlights

  • Passive triage for CVE-2026-109618 and CVE-2026-109619 using upstream fix thresholds (8.2.35, 8.3.36, 8.4.27, 8.5.12), with rules checked on 2026-10-21.
  • New --format html report: a single offline file with your logo, summary tiles and results sorted by risk. Rebrand it with --logo and --brand.
  • CSV and JSON output, robots.txt compliance, verified TLS, no exploit payloads.
  • Single Python file, no dependencies, Python 3.10+.

Get started

python wordpress_check.py --input websites.txt --format html --output report.html

example-report.html (attached) is a synthetic sample built from reserved example.* domains.

Potential exposure is not confirmed exploitability. See the methodology.