한국어
Free PHP security checker

Know Your PHP Vulnerabilities.Fix Them Before Attackers Do.

Enter a PHP version to see its support status, the known PHP engine vulnerabilities that apply to it, the fixed releases, and where to upgrade — with every claim linked to its source.

Find it with php -v, in WordPress under Tools → Site Health → Info → Server, or in your hosting panel.

Try

Runs in your browser. Nothing you type is sent to a server.

Illustrative example

What this can tell you

  • Whether a PHP branch still receives security fixes
  • Which published PHP advisories list your exact version as affected
  • The first fixed release in your branch and safe upgrade targets

What it cannot tell you

  • Whether your host or Linux distribution backported a fix under the same version number
  • Vulnerabilities in WordPress, plugins, themes or your own code
Three focused tools

From a version string to an action plan

Each tool answers one question precisely and tells you what it could not determine.

PHP Version Checker

Support status, affected advisories, fixed versions and upgrade targets for any PHP release.

Check a version

CVE Lookup

Search PHP engine advisories by CVE or GHSA ID or keyword, with CVSS, ranges and references.

Search advisories

Website Security Checker

Passive, non-intrusive checks for HTTPS, security headers, version disclosure and exposed files.

Scan a site
Honest results

Five answers, never a false “all clear”

PatchScope only reports a version as affected when the advisory’s own version criteria say so. Everything uncertain is labelled as uncertain.

  1. Affected

    Your version falls inside a range the advisory lists, below the first fixed release.

  2. Potentially affected

    The advisory may apply — for example, an unsupported branch that upstream did not assess, or a distribution build.

  3. Fixed

    Your version is at or past the fixed release, or the branch was released after the fix.

  4. Unsupported

    The branch is end-of-life. New vulnerabilities are no longer fixed or assessed for it.

  5. Insufficient information

    Not enough detail to decide — such as “8.3” without a patch number, or a version newer than our data.

Support timeline

PHP branch support at a glance

Every PHP branch gets two years of active support and two years of security fixes. After that, it is end-of-life.

Active supportSecurity fixes onlyEnd of life
PHP 8.5
Active support
PHP 8.4
Active support
PHP 8.3
Security fixes only
PHP 8.2
Security fixes only
PHP 8.1
End of life
PHP 8.0
End of life
PHP 7.4
End of life

PHP 8.6 is in RC testing (expected Nov 19, 2026).

Recent advisories

Latest PHP engine vulnerabilities

View all advisories
WordPress Security Center

Running WordPress? Keep PHP and plugins separate in your head.

A vulnerable plugin and a vulnerable PHP engine are fixed by different people in different places. Our WordPress center explains PHP compatibility, safe upgrades through hosting panels, backups and common misconfigurations.

Open the WordPress center
Guides

Practical, source-linked security guides

All guides
Basics

How to Check Your PHP Version

Find the exact PHP version on a server, shared host or WordPress site using the command line, phpinfo(), Site Health, cPanel or Plesk, and read the result.

6 min read
Lifecycle

PHP Security Support Lifecycle Explained

How PHP's active support, security-only and end-of-life phases work, which branches are supported in October 2026, and what each phase means for your servers.

6 min read
WordPress

How to Update PHP in WordPress

A step-by-step process for safely moving a WordPress site to a newer PHP version: compatibility checks, backups, staging, cPanel or Plesk, rollback.

7 min read