Repository navigation
Sources and License
github-actions[bot] edited this page Nov 3, 2026
·
1 revision
PHP2Shell
- PHP security advisory GHSA-w8hw-w9fx-j79w (php-src)
- Wiz — PHP2Shell: AI uncovers critical RCE vulnerabilities
- Tenable — PHP2Shell FAQ
- Help Net Security — PHP2Shell patched, update now
- Sansec — PHP2Shell
- Patchstack — PHP major vulnerability alert
- PHP2Shell detection opportunities (community gist)
- AlmaLinux — patched PHP packages
- Wordfence — Attacks on PHP2Shell continue (payload markers, kit file names, top sources)
- Arctic Wolf — PHP2Shell (Potassium botnet hashes, servers, download names)
- Hunt.io — Hunting leaked PHP2Shell RCE across open directories
- SOCRadar — PHP2Shell (leaked attacker server)
- ReliaQuest — Responding to PHP2Shell (log artifacts)
- Datadog Security Labs — PHP2Shell detection
- The Hacker News — CVE-2026-115560
wp2shell
- Wiz Research — Exploitation in the Wild of wp2shell
- Elastic Security Labs — wp2shell detection end to end
- MalwareBazaar — wp-static-cache webshell sample
- BleepingComputer — wp2shell RCE flaws get public exploits
MIT — see LICENSE. Changes are listed in CHANGELOG.md.
Made by Jeremy Anderson of Jeremy Anderson Tech — WordPress builds, custom platforms and AI tools. Services · Book a call
This wiki is built from the repository's README.md by .github/scripts/build-wiki.py. To change a page, edit README.md: edits made here are replaced the next time the wiki is rebuilt.
For site owners
- PHP2Shell and wp2shell
- Install, scan and update
- Understanding your results
- What it checks
- Settings and alerts
- If your site is compromised
- Troubleshooting, logs and hosting
- FAQ
For agencies and developers
- WP-CLI
- Scanning many sites
- How it works, privacy and limits
- Hooks, report format and development
- Sources and license
Links