Status in the company's own words: patched. Statement dated Oct 21, 2026.
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.
WP Cloud-powered sites are already protected against both vulnerabilities. quoted from https://wp.cloud/wp-cloud-powered-sites-protected-against-critical-php-vulnerabilities/ (title: WP Cloud-Powered Sites Protected Against Critical PHP Vulnerabilities; Oct 21, 2026; excerpt also says Automattic worked closely with the PHP Security team). Says protected; names no deployed build. Parent Automattic post of October 21, 2026 also names WP Cloud: There is nothing you need to do. WP Cloud is An Automattic venture per its footer.
Change log
: first check
What the five engines said
AI answers not yet measured
Submit a correction or your statement
Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.
Badge
The badge for WP Cloud reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.
WP Cloud's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about WP Cloud and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.
About this page
This index reports published statements and AI answers on stated dates. It is not a security assessment. For patching, follow PHP's advisory and your host.