Broadcastwell $490 Audit
Menu

PHP2Shell statement record · Platform

UnoPim (Webkul) and PHP2Shell

Status in the company's own words: patched. Statement dated Oct 21, 2026 (opened), merged Oct 22, 2026.

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last checked . Last refreshed .

Submit a correction or your statement Get the badge All statements

The record

Company
UnoPim (Webkul)
Domain
unopim.com
Group
Platform
Index category
not an Index vendor
Status
patched
Statement found
yes
Statement
https://github.com/unopim/unopim/pull/787
Statement date
Oct 21, 2026 (opened), merged Oct 22, 2026
Fixed version named
yes: webkul/unopim and webkul/unopim-queue Docker images (tags 3.1.3, 3.1, latest) rebuilt on PHP 8.4.27
Worker restart stated
no
End of life plan stated
no
Source type
official page
Places checked
Last checked

The statement

Read the statement on github.com, dated Oct 21, 2026 (opened), merged Oct 22, 2026. Source type: official page.

Notes

Merged pull request fix(docker): disable session upload progress in php.ini (#787) on the project's official GitHub repository by Webkul developer navneetkumar-pim-webkul, citing CVE-2026-109618 and CVE-2026-109619: the published images previously ran PHP 8.4.26 and were rebuilt and republished on PHP 8.4.27; Upgrading PHP is the only complete fix. quoted from the PR URL. The PR also sets session.upload_progress.enabled = Off in the image php.ini. The v3.1.3 release page read in this run carried no PHP2Shell text, contrary to the NCSC-NL note. Self-hosted non-Docker installs not addressed on the page read.

Change log

What the five engines said

AI answers not yet measured

Submit a correction or your statement

Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.

Badge

The badge for UnoPim (Webkul) reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.

UnoPim (Webkul)'s customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about UnoPim (Webkul) and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.

About this page

This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.

Last refreshed .

PHP2Shell Statement Index · AI Answer Watch · Download the data · Submit a statement · Dispute policy