PHP2Shell Statement Index

What the status words mean

Seven status words, in the company's own terms. A company is:

patched

only when the company's own statement says the fix is deployed.

patched partly

when the statement limits the fix to some plans or products.

patching

when the statement says the rollout is in progress.

mitigation only

when the statement reports firewall or configuration measures and no patched build.

not affected

only when the company itself says so.

customer must update

when the company says the runtime is the customer's responsibility.

no public statement located

when none was found at the places checked, printed with that date and those places.

A secondary report (news, tracker) never upgrades a row; it may appear in notes as "reported by <source>".

Submit your statement

Published a statement we have not listed, or listed with the wrong status? Submit your statement. We list it once we have opened it on your own domain or verified official account, and we reply within one business day. Or email the statement link to index@broadcastwell.com.

Badge

Every company with a located statement has a badge reading PHP2Shell statement listed, with the verified date and a link to its dated record. The badge is linked from each record and follows the badge terms. It is free.

Download the data

• statements.jsonEvery statement row with its places checked, change log, excerpt and graded AI answers.
• statements.csvThe same rows as a spreadsheet, in the working column order.
• ai-answers.jsonEvery graded AI answer about a listed company, with the verbatim excerpt and cited addresses.
• watch.jsonEvery day of the AI Answer Watch: one graded cell per engine per question.
• watch.csvThe watch cells as a spreadsheet.
• README.mdColumn definitions, the status rules and the capture method.

CC BY 4.0 with attribution to Broadcastwell. All files.

AI Answer Watch

Twice a week, on Mondays and Thursdays, we put five safety questions to ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode and grade every answer against PHP's own fixed releases.

Safe answers on 23 October 2026, out of the five questions: ChatGPT 5 of 5; Claude 5 of 5; Perplexity 5 of 5; Google AI Overviews 5 of 5; Google AI Mode 4 of 5.

A safe answer gives no wrong fixed version, does not say that updating WordPress fixes it and states no wrong severity score; on the two version questions it also names a correct fixed version. Captured 23 October 2026, 00:23 UTC.

Read the AI Answer Watch

Questions and answers

What does patched mean here?

A company is patched only when its own statement says the fix is deployed. A statement that limits the fix to some plans or products is patched partly, and a rollout that the statement calls in progress is patching. A news report or a tracker never upgrades a row; it can only appear in the notes as reported by that source.

How often is this refreshed?

We re-check every listed company daily at the places printed on its record, and the AI Answer Watch captures one answer per engine per question on Mondays and Thursdays (US Eastern) through 19 November 2026. Every page prints the time of its last refresh in UTC, and every change to a row is dated in its change log.

How do we add or correct a statement?

Send the statement link through the submission form or email it to index@broadcastwell.com. We list a statement only once we have opened it on the company's own domain or verified official account, and we reply within one business day. Disputes follow the published dispute policy.

What do the AI answer grades mean?

Match: the engine named the status the company's own statement gave on that date. Differs: the engine named a different status, or a status for a company where we located no statement. Contradiction: the engine said there was no statement when one existed, or called the company not affected when its statement gave an affected status (or the reverse). No status named: the answer did not state a status. We read status words only in the sentences that name the company. Excluded: the engine returned no answer, or the capture was excluded, with the reason printed.

For listed companies

Listed companies and their customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about the company and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.