Does a site show a PHP version below the Oct 2026 fixes (CVE-2026-109618/9)? Rea...
https://site-audit.x402tookit.com/php-exposureOverview
Does a site show a PHP version below the Oct 2026 fixes (CVE-2026-109618/9)? Reads headers; says 'hidden' when it cannot tell.
Protocol
x402
Price
$0.03
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
uncategorized
Provider
Site Audit
Source
bazaar
Indexed
2026-11-02 04:13:53
Health
Status
unknown
Latency (p50)
—
Uptime (30d)
—
Reliability Score
—
Last Checked
Never
Last Healthy
Never
Consecutive Failures
0
x402 Payment Validation
Payment Requirements
—
Asset Verified
—
Facilitator
—
Input Schema
{
"method": "GET",
"queryParams": {
"url": "https://wordpress.org/"
},
"type": "http"
}
Output Schema
{
"example": {
"asOf": "2026-10-23T03:26:06.744Z",
"degraded": false,
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"httpStatus": 200,
"notChecked": [
"the version actually running behind a proxy or CDN",
"fixes a Linux distribution applied without changing the version string",
"…3 more"
],
"phpDetected": true,
"reasons": [
"Hiding the version is normal hardening; it says nothing about whether the server is patched.",
"Fixed releases: 8.2: 8.2.35, 8.3: 8.3.36, 8.4: 8.4.27, 8.5: 8.5.12. Ask the host or check the server directly."
],
"signs": [
"WordPress headers (WordPress runs on PHP)"
],
"source": "live GET of the named URL (response headers)",
"sourceUrl": "https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/",
"summary": "https://wordpress.org/ shows signs of PHP (WordPress headers (WordPress runs on PHP)) but does not reveal a version, so exposure cannot be judged from outside.",
"url": "https://wordpress.org/",
"verdict": "PHP_DETECTED_VERSION_HIDDEN",
"version": null
},
"type": "json"
}