Blog
Free PHP checker: Check in under a minute
Could the PHP vulnerability affect your website? Our free checker usually gives you an initial assessment in under a minute. All you need is your web address – no IT expertise, account or installation.
Check your website for freePublished · by Konrad Mayer
A web address is all you need
Whether you run a community website, business site or online shop, an address such as example.com is enough to start. You do not need to know your PHP version or have access to the server.
Open the checker and check a website you own or have permission to check. The beta is free and works directly in your browser.
Three simple steps
1. Enter your web address in the “Domain or website URL” field.
2. Confirm that you operate the website or have permission to check it.
3. Click “Check website”. The checker requests the homepage and displays a short assessment. This normally takes just a few seconds.
What does your result mean?
“Probably affected”: the reported PHP version suggests possible exposure. Forward the result to your web developer or hosting provider and ask for a prompt review.
“Probably patched”: the reported version matches a patched release for the vulnerability being checked. This is a useful hint, but it does not guarantee the overall security of your website.
“Unable to determine”: the site did not provide sufficiently clear version information, or the check was inconclusive. This is not an all-clear. Your host can check the actual status.
Why the answer is sometimes unclear
Many websites hide their PHP version, so an external quick check cannot read a reliable number. Older version numbers may also include security fixes applied by the host.
The checker caches results for 15 minutes and shows when the check took place. If the request limit is reached, try again later. “Under a minute” describes the usual process when the tool is available.
An initial assessment without changing your site
The checker reads only publicly returned response information from your homepage. It changes no settings, makes no exploitation attempt and performs no load test.
The beta covers the PHP vulnerability identified in the tool as CVE-2026-109618. Its result helps you decide on a next step; it does not replace a comprehensive security assessment.
Need a closer look?
If the result is unclear or you need support, Konrad Mayer’s contact details are available in the checker. Your web address, the check time and the reported version are useful when contacting your host.
The tool page also offers an optional diagnostic script for further technical checks. It is intended for whoever manages your server. The quick online check only needs your web address.