OpenAI releases PHP2Shell checker: Here’s how to check if your website is at risk

OpenAI has released a Codex-based PHP2Shell checker that helps website owners identify potentially vulnerable PHP versions. Here's how to access the tool on GitHub, install its Codex skills, scan a website and understand the results. The checker does not fix vulnerabilities or guarantee that a website is secure.

PHP runs behind millions of websites, including many built using WordPress. The two vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, could allow attackers to execute malicious commands on affected servers. OpenAI says its AI-assisted security research contributed to identifying the flaws, with cybersecurity company Wiz independently reporting both issues. PHP’s maintainers coordinated the fixes.

Read more: What is PHP2Shell? Critical PHP flaws put millions of websites on emergency patch alert

What is OpenAI’s PHP2Shell checker?

The........

© News9Live