{ "title": "PHP Version Statistics After PHP2Shell: 100,000+ Sites", "snapshotDate": "2026-10-25", "articleUrl": "https://webaloha.co/php-version-statistics-2026/", "research": { "databaseSnapshotAt": "2026-10-25T05:35:55.887001+00:00", "windowStart": "2026-10-18", "windowEnd": "2026-10-25", "timezone": "UTC", "partialBoundaryDays": [ "2026-10-18", "2026-10-25" ], "tool": "php-version-checker", "source": "php-version-checker", "mode": "full", "detectorVersion": "2026-10-18.2", "recordedSites": 100893, "eligibleVersionSites": 17228, "coverage": [ { "label": "Eligible public version", "sites": 17228, "percentageOfRecordedSites": 17.0755 }, { "label": "Completed, no eligible version", "sites": 72119, "percentageOfRecordedSites": 71.4807 }, { "label": "Incomplete or unavailable", "sites": 11546, "percentageOfRecordedSites": 11.4438 } ], "branchDistribution": [ { "branch": "8.5", "sites": 2179, "percentageOfEligibleVersions": 12.648 }, { "branch": "8.4", "sites": 2457, "percentageOfEligibleVersions": 14.2617 }, { "branch": "8.3", "sites": 4652, "percentageOfEligibleVersions": 27.0026 }, { "branch": "8.2", "sites": 2605, "percentageOfEligibleVersions": 15.1207 }, { "branch": "8.1", "sites": 1217, "percentageOfEligibleVersions": 7.0641 }, { "branch": "8.0", "sites": 487, "percentageOfEligibleVersions": 2.8268 }, { "branch": "7.4", "sites": 2038, "percentageOfEligibleVersions": 11.8296 }, { "branch": "7.3 and older", "sites": 1587, "percentageOfEligibleVersions": 9.2117 }, { "branch": "8.6 (unclassified)", "sites": 6, "percentageOfEligibleVersions": 0.0348 } ], "allReportedBranches": { "4.3": 5, "4.4": 10, "5.0": 1, "5.1": 3, "5.2": 36, "5.3": 121, "5.4": 104, "5.5": 53, "5.6": 411, "7.0": 128, "7.1": 111, "7.2": 256, "7.3": 348, "7.4": 2038, "8.0": 487, "8.1": 1217, "8.2": 2605, "8.3": 4652, "8.4": 2457, "8.5": 2179, "8.6": 6 }, "reportedVersionCounts": { "4.4": 2, "5.4": 5, "5.5": 1, "5.6": 11, "7.0": 6, "7.1": 3, "7.2": 9, "7.3": 13, "7.4": 62, "8.0": 23, "8.1": 19, "8.2": 55, "8.3": 89, "8.4": 74, "8.5": 78, "8.6": 6, "4.4.9": 8, "5.0.4": 1, "5.1.4": 1, "5.1.6": 2, "5.2.1": 1, "5.2.6": 2, "5.3.0": 1, "5.3.3": 38, "5.3.6": 3, "5.3.8": 3, "5.4.7": 2, "5.5.6": 1, "5.5.7": 1, "5.6.0": 6, "5.6.1": 2, "5.6.2": 2, "5.6.3": 1, "5.6.7": 1, "5.6.8": 1, "7.0.5": 1, "7.0.6": 1, "7.0.7": 4, "7.0.9": 3, "7.1.2": 1, "7.1.6": 1, "7.1.7": 4, "7.2.0": 2, "7.2.2": 2, "7.2.3": 1, "7.2.6": 1, "7.2.7": 3, "7.2.8": 1, "7.2.9": 1, "7.3.0": 1, "7.3.1": 5, "7.3.2": 2, "7.3.5": 5, "7.3.6": 3, "7.3.7": 2, "7.3.8": 6, "7.3.9": 3, "7.4.0": 4, "7.4.1": 5, "7.4.4": 3, "7.4.5": 2, "7.4.6": 3, "7.4.7": 6, "7.4.8": 7, "7.4.9": 9, "8.0.0": 5, "8.0.3": 2, "8.0.7": 2, "8.0.9": 2, "8.1.0": 1, "8.1.1": 2, "8.1.4": 1, "8.1.5": 1, "8.1.6": 2, "8.1.7": 3, "8.1.8": 1, "8.1.9": 2, "8.2.0": 2, "8.2.1": 1, "8.2.2": 1, "8.2.3": 2, "8.2.4": 8, "8.2.5": 4, "8.2.6": 3, "8.2.7": 3, "8.2.8": 2, "8.2.9": 3, "8.3.0": 11, "8.3.2": 1, "8.3.3": 1, "8.3.4": 2, "8.3.6": 9, "8.3.7": 2, "8.3.8": 28, "8.3.9": 7, "8.4.1": 1, "8.4.2": 1, "8.4.3": 1, "8.4.4": 5, "8.4.5": 3, "8.4.6": 3, "8.4.7": 8, "8.4.8": 2, "8.5.0": 4, "8.5.1": 1, "8.5.2": 4, "8.5.3": 2, "8.5.4": 7, "8.5.5": 3, "8.5.6": 8, "8.5.7": 9, "8.5.8": 12, "8.5.9": 13, "4.3.10": 4, "4.3.11": 1, "5.2.10": 2, "5.2.11": 2, "5.2.12": 1, "5.2.17": 28, "5.3.10": 1, "5.3.14": 1, "5.3.17": 2, "5.3.18": 1, "5.3.21": 2, "5.3.23": 1, "5.3.24": 2, "5.3.26": 1, "5.3.28": 7, "5.3.29": 58, "5.4.16": 40, "5.4.20": 1, "5.4.24": 1, "5.4.25": 1, "5.4.27": 1, "5.4.28": 1, "5.4.31": 1, "5.4.34": 1, "5.4.35": 1, "5.4.40": 2, "5.4.41": 1, "5.4.43": 1, "5.4.45": 45, "5.5.11": 3, "5.5.13": 2, "5.5.15": 1, "5.5.16": 1, "5.5.26": 1, "5.5.34": 1, "5.5.36": 2, "5.5.37": 1, "5.5.38": 38, "5.6.11": 1, "5.6.14": 1, "5.6.15": 1, "5.6.17": 2, "5.6.19": 1, "5.6.20": 1, "5.6.22": 1, "5.6.25": 3, "5.6.26": 1, "5.6.27": 1, "5.6.28": 1, "5.6.29": 2, "5.6.30": 13, "5.6.31": 8, "5.6.32": 3, "5.6.33": 4, "5.6.34": 2, "5.6.36": 3, "5.6.37": 3, "5.6.38": 4, "5.6.39": 1, "5.6.40": 330, "7.0.10": 1, "7.0.11": 2, "7.0.12": 1, "7.0.13": 1, "7.0.14": 1, "7.0.15": 1, "7.0.25": 2, "7.0.27": 2, "7.0.28": 2, "7.0.30": 4, "7.0.31": 1, "7.0.32": 1, "7.0.33": 94, "7.1.10": 3, "7.1.13": 1, "7.1.14": 1, "7.1.16": 1, "7.1.19": 1, "7.1.22": 1, "7.1.23": 2, "7.1.25": 1, "7.1.27": 1, "7.1.28": 3, "7.1.29": 4, "7.1.30": 5, "7.1.33": 78, "7.2.10": 2, "7.2.11": 5, "7.2.12": 1, "7.2.14": 3, "7.2.15": 1, "7.2.16": 1, "7.2.18": 2, "7.2.20": 1, "7.2.21": 1, "7.2.22": 1, "7.2.23": 1, "7.2.24": 26, "7.2.26": 4, "7.2.27": 1, "7.2.28": 2, "7.2.30": 3, "7.2.31": 2, "7.2.33": 3, "7.2.34": 176, "7.3.10": 3, "7.3.11": 7, "7.3.12": 2, "7.3.13": 3, "7.3.14": 4, "7.3.16": 1, "7.3.17": 3, "7.3.18": 2, "7.3.19": 1, "7.3.20": 6, "7.3.21": 2, "7.3.22": 2, "7.3.23": 2, "7.3.25": 6, "7.3.27": 10, "7.3.28": 1, "7.3.29": 2, "7.3.31": 4, "7.3.33": 247, "7.4.10": 4, "7.4.11": 4, "7.4.12": 2, "7.4.13": 22, "7.4.14": 3, "7.4.15": 11, "7.4.16": 8, "7.4.19": 5, "7.4.20": 4, "7.4.21": 12, "7.4.22": 4, "7.4.23": 5, "7.4.24": 6, "7.4.25": 9, "7.4.26": 9, "7.4.27": 16, "7.4.28": 6, "7.4.29": 7, "7.4.30": 55, "7.4.32": 5, "7.4.33": 1740, "8.0.10": 3, "8.0.11": 2, "8.0.12": 2, "8.0.13": 7, "8.0.14": 1, "8.0.15": 2, "8.0.16": 4, "8.0.17": 1, "8.0.18": 2, "8.0.20": 1, "8.0.22": 1, "8.0.23": 1, "8.0.25": 2, "8.0.26": 3, "8.0.27": 4, "8.0.28": 6, "8.0.29": 3, "8.0.30": 408, "8.1.10": 4, "8.1.11": 3, "8.1.12": 1, "8.1.13": 5, "8.1.14": 5, "8.1.15": 2, "8.1.16": 2, "8.1.17": 1, "8.1.18": 1, "8.1.19": 2, "8.1.20": 2, "8.1.21": 4, "8.1.22": 5, "8.1.24": 2, "8.1.25": 1, "8.1.26": 1, "8.1.27": 11, "8.1.28": 6, "8.1.29": 19, "8.1.30": 4, "8.1.31": 12, "8.1.32": 28, "8.1.33": 39, "8.1.34": 1025, "8.2.10": 3, "8.2.11": 3, "8.2.12": 19, "8.2.13": 7, "8.2.14": 1, "8.2.15": 2, "8.2.16": 4, "8.2.17": 2, "8.2.18": 3, "8.2.19": 1, "8.2.20": 18, "8.2.21": 2, "8.2.22": 3, "8.2.23": 8, "8.2.24": 6, "8.2.25": 6, "8.2.26": 2, "8.2.27": 18, "8.2.28": 42, "8.2.29": 48, "8.2.30": 41, "8.2.31": 19, "8.2.32": 10, "8.2.33": 109, "8.2.34": 1104, "8.2.35": 1040, "8.3.10": 2, "8.3.11": 3, "8.3.12": 4, "8.3.13": 9, "8.3.14": 8, "8.3.15": 3, "8.3.16": 6, "8.3.17": 5, "8.3.19": 11, "8.3.20": 9, "8.3.21": 13, "8.3.22": 46, "8.3.23": 8, "8.3.24": 9, "8.3.25": 57, "8.3.26": 8, "8.3.27": 17, "8.3.28": 20, "8.3.29": 17, "8.3.30": 43, "8.3.31": 69, "8.3.32": 14, "8.3.33": 160, "8.3.35": 1919, "8.3.36": 2042, "8.4.10": 8, "8.4.11": 8, "8.4.12": 15, "8.4.13": 6, "8.4.14": 9, "8.4.15": 4, "8.4.16": 23, "8.4.17": 8, "8.4.18": 5, "8.4.19": 7, "8.4.20": 4, "8.4.21": 18, "8.4.22": 10, "8.4.23": 12, "8.4.24": 12, "8.4.25": 53, "8.4.26": 945, "8.4.27": 1212, "8.5.10": 48, "8.5.11": 874, "8.5.12": 1116 }, "lifecycle": { "end-of-life": 5329, "security-only": 7257, "active": 4636, "unknown": 6 }, "primaryOutcomes": { "scan:blocked": 5532, "scan:partial": 1028, "scan:complete": 89347, "scan:not_found": 570, "scan:timed_out": 2626, "scan:tls_error": 296, "scan:http_error": 1494 }, "firstOutcomes": { "scan:blocked": 5594, "scan:partial": 1038, "scan:complete": 89151, "scan:not_found": 584, "scan:timed_out": 2678, "scan:tls_error": 306, "scan:http_error": 1542 }, "firstEligibleReplacements": 729, "firstObservationDates": { "2026-10-18": 14, "2026-10-19": 58, "2026-10-20": 150, "2026-10-21": 40025, "2026-10-22": 43999, "2026-10-23": 13605, "2026-10-24": 2796, "2026-10-25": 246 }, "legacyDetectorRecordsExcluded": 3, "completedPhpSignalCoverage": { "denominator": 49637, "wordPressSignalWithoutVersion": 25626, "otherPhpSignalWithoutVersion": 6592, "versionSignal": 17419, "noVersion": 32218, "noVersionPercentage": 64.9072, "versionSignalIncludesBodyOnly": 5, "definition": "Complete results with PHP-related public signals. These clues do not verify the executing runtime or intentional version hiding." }, "allOutcomeEvidenceLabels": { "version_body": 5, "no_php_signal": 50624, "hidden_php_app": 6670, "version_header": 17625, "hidden_wordpress": 25969 }, "outcomeEvidenceCounts": { "complete|version_body": 5, "complete|no_php_signal": 39710, "complete|hidden_php_app": 6592, "complete|version_header": 17414, "complete|hidden_wordpress": 25626 }, "terminalReleaseClusters": [ { "branch": "7.4", "lastOrdinaryRelease": "7.4.33", "reports": 1740, "branchReports": 2038 }, { "branch": "8.0", "lastOrdinaryRelease": "8.0.30", "reports": 408, "branchReports": 487 }, { "branch": "8.1", "lastOrdinaryRelease": "8.1.34", "reports": 1025, "branchReports": 1217 }, { "branch": "5.6", "lastOrdinaryRelease": "5.6.40", "reports": 330, "branchReports": 411 } ], "php449Reports": 8, "supportedPatchReports": { "fixedReleaseThresholds": { "8.2": "8.2.35", "8.3": "8.3.36", "8.4": "8.4.27", "8.5": "8.5.12" }, "advisoryDate": "2026-10-21", "completeDays": [ { "date": "2026-10-21", "denominator": 4116, "atOrAbove": 1322, "below": 2794, "oneReleaseBehind": 1968, "percentage": 32.1186 }, { "date": "2026-10-22", "denominator": 5322, "atOrAbove": 2768, "below": 2554, "oneReleaseBehind": 2158, "percentage": 52.0105 }, { "date": "2026-10-23", "denominator": 1726, "atOrAbove": 1037, "below": 689, "oneReleaseBehind": 592, "percentage": 60.0811 }, { "date": "2026-10-24", "denominator": 369, "atOrAbove": 260, "below": 109, "oneReleaseBehind": 93, "percentage": 70.4607 } ], "completePeriodTotals": { "denominator": 11533, "atOrAbove": 5387, "below": 6146, "oneReleaseBehind": 4811 }, "canonicalFullVersionCountsByDay": { "2026-10-21": { "8.2.2": 1, "8.2.4": 3, "8.2.5": 2, "8.2.6": 2, "8.2.8": 1, "8.2.9": 1, "8.3.0": 5, "8.3.2": 1, "8.3.4": 1, "8.3.6": 5, "8.3.7": 1, "8.3.8": 14, "8.3.9": 2, "8.4.2": 1, "8.4.3": 1, "8.4.4": 3, "8.4.5": 2, "8.4.6": 3, "8.4.7": 4, "8.5.0": 2, "8.5.2": 4, "8.5.3": 1, "8.5.4": 5, "8.5.5": 1, "8.5.6": 5, "8.5.7": 6, "8.5.8": 4, "8.5.9": 7, "8.2.10": 3, "8.2.11": 2, "8.2.12": 4, "8.2.13": 5, "8.2.15": 1, "8.2.16": 1, "8.2.17": 1, "8.2.18": 1, "8.2.19": 1, "8.2.20": 7, "8.2.22": 1, "8.2.23": 4, "8.2.24": 4, "8.2.25": 2, "8.2.27": 8, "8.2.28": 20, "8.2.29": 26, "8.2.30": 18, "8.2.31": 11, "8.2.32": 7, "8.2.33": 83, "8.2.34": 435, "8.2.35": 234, "8.3.10": 2, "8.3.11": 2, "8.3.12": 2, "8.3.13": 4, "8.3.14": 2, "8.3.15": 1, "8.3.16": 3, "8.3.17": 2, "8.3.19": 3, "8.3.20": 4, "8.3.21": 8, "8.3.22": 34, "8.3.23": 3, "8.3.24": 8, "8.3.25": 53, "8.3.26": 2, "8.3.27": 10, "8.3.28": 12, "8.3.29": 13, "8.3.30": 16, "8.3.31": 43, "8.3.32": 9, "8.3.33": 113, "8.3.35": 775, "8.3.36": 488, "8.4.10": 4, "8.4.11": 5, "8.4.12": 14, "8.4.13": 4, "8.4.14": 6, "8.4.15": 1, "8.4.16": 19, "8.4.17": 5, "8.4.18": 2, "8.4.19": 3, "8.4.20": 3, "8.4.21": 13, "8.4.22": 4, "8.4.23": 7, "8.4.24": 9, "8.4.25": 48, "8.4.26": 427, "8.4.27": 342, "8.5.10": 32, "8.5.11": 331, "8.5.12": 258 }, "2026-10-22": { "8.2.0": 1, "8.2.4": 4, "8.2.5": 2, "8.2.6": 1, "8.2.7": 1, "8.2.9": 2, "8.3.0": 5, "8.3.3": 1, "8.3.4": 1, "8.3.6": 4, "8.3.8": 9, "8.3.9": 4, "8.4.1": 1, "8.4.5": 1, "8.4.7": 4, "8.4.8": 2, "8.5.1": 1, "8.5.3": 1, "8.5.4": 1, "8.5.5": 1, "8.5.6": 3, "8.5.7": 3, "8.5.8": 6, "8.5.9": 5, "8.2.11": 1, "8.2.12": 12, "8.2.13": 2, "8.2.14": 1, "8.2.15": 1, "8.2.16": 3, "8.2.17": 1, "8.2.18": 2, "8.2.20": 9, "8.2.22": 1, "8.2.23": 2, "8.2.24": 1, "8.2.25": 2, "8.2.26": 2, "8.2.27": 9, "8.2.28": 14, "8.2.29": 16, "8.2.30": 19, "8.2.31": 6, "8.2.32": 1, "8.2.33": 22, "8.2.34": 509, "8.2.35": 528, "8.3.11": 1, "8.3.12": 1, "8.3.13": 3, "8.3.14": 4, "8.3.15": 1, "8.3.16": 2, "8.3.17": 2, "8.3.19": 5, "8.3.20": 3, "8.3.21": 5, "8.3.22": 12, "8.3.23": 3, "8.3.24": 1, "8.3.25": 4, "8.3.26": 5, "8.3.27": 6, "8.3.28": 5, "8.3.29": 4, "8.3.30": 20, "8.3.31": 23, "8.3.32": 5, "8.3.33": 36, "8.3.35": 835, "8.3.36": 1083, "8.4.10": 4, "8.4.11": 3, "8.4.12": 1, "8.4.13": 1, "8.4.14": 2, "8.4.15": 2, "8.4.16": 2, "8.4.17": 2, "8.4.18": 2, "8.4.19": 2, "8.4.20": 1, "8.4.21": 5, "8.4.22": 3, "8.4.23": 4, "8.4.24": 3, "8.4.25": 5, "8.4.26": 422, "8.4.27": 594, "8.5.10": 12, "8.5.11": 392, "8.5.12": 563 }, "2026-10-23": { "8.2.0": 1, "8.2.1": 1, "8.2.3": 2, "8.2.4": 1, "8.2.7": 1, "8.2.8": 1, "8.3.0": 1, "8.3.7": 1, "8.3.8": 3, "8.3.9": 1, "8.5.0": 2, "8.5.5": 1, "8.5.8": 2, "8.5.9": 1, "8.2.12": 3, "8.2.20": 1, "8.2.21": 2, "8.2.22": 1, "8.2.23": 1, "8.2.24": 1, "8.2.25": 2, "8.2.27": 1, "8.2.28": 7, "8.2.29": 5, "8.2.30": 4, "8.2.31": 1, "8.2.32": 2, "8.2.33": 4, "8.2.34": 137, "8.2.35": 219, "8.3.12": 1, "8.3.13": 1, "8.3.14": 2, "8.3.15": 1, "8.3.16": 1, "8.3.17": 1, "8.3.19": 2, "8.3.20": 2, "8.3.23": 2, "8.3.26": 1, "8.3.28": 3, "8.3.30": 4, "8.3.31": 1, "8.3.33": 9, "8.3.35": 248, "8.3.36": 374, "8.4.15": 1, "8.4.16": 2, "8.4.17": 1, "8.4.18": 1, "8.4.19": 2, "8.4.23": 1, "8.4.26": 86, "8.4.27": 219, "8.5.10": 4, "8.5.11": 121, "8.5.12": 225 }, "2026-10-24": { "8.2.7": 1, "8.3.8": 2, "8.4.4": 2, "8.5.4": 1, "8.2.20": 1, "8.2.23": 1, "8.2.28": 1, "8.2.34": 19, "8.2.35": 55, "8.3.13": 1, "8.3.19": 1, "8.3.27": 1, "8.3.30": 2, "8.3.31": 1, "8.3.35": 44, "8.3.36": 90, "8.4.13": 1, "8.4.26": 6, "8.4.27": 52, "8.5.11": 24, "8.5.12": 63 } }, "definition": "Eligible canonical x.y.z public reports on PHP 8.2-8.5, grouped by their first eligible observation day. Numeric patch components are compared within the same branch. Different sites per day; not longitudinal patch adoption. Release day mixes pre/post announcement observations. Partial 25 October is excluded." } }, "traffic": { "source": "Web Aloha GA4", "retrievedAt": "2026-10-25T05:36:39.237Z", "timezone": "UTC", "completeDays": [ { "date": "2026-10-18", "pageViews": 14, "sessions": 13, "dailyUsers": 13, "toolRuns": 12, "toolResults": 11 }, { "date": "2026-10-19", "pageViews": 70, "sessions": 71, "dailyUsers": 63, "toolRuns": 54, "toolResults": 50 }, { "date": "2026-10-20", "pageViews": 99, "sessions": 93, "dailyUsers": 85, "toolRuns": 112, "toolResults": 108 }, { "date": "2026-10-21", "pageViews": 23766, "sessions": 21031, "dailyUsers": 18043, "toolRuns": 37955, "toolResults": 37066 }, { "date": "2026-10-22", "pageViews": 33458, "sessions": 31304, "dailyUsers": 26091, "toolRuns": 50574, "toolResults": 49239 }, { "date": "2026-10-23", "pageViews": 11831, "sessions": 11784, "dailyUsers": 9795, "toolRuns": 17011, "toolResults": 16494 }, { "date": "2026-10-24", "pageViews": 2550, "sessions": 2289, "dailyUsers": 2027, "toolRuns": 2934, "toolResults": 2827 } ], "period": { "start": "2026-10-21", "end": "2026-10-24", "runEvents": 108474, "resultEvents": 105626, "measuredUsers": 52665, "sessions": 67051, "pageViews": 71605 } }, "interpretation": [ "Self-selected sites submitted to the checker, not an estimate of web-wide PHP use.", "Version percentages use only complete successful responses with strong unambiguous public version evidence.", "Public versions do not verify installed packages, backports, patch state, vulnerability or compromise.", "Sites, GA4 users and run events use different units, coverage and windows.", "No-version signals and incomplete checks are distinct; missing evidence does not prove PHP is absent.", "Daily reported-version cohorts do not follow the same sites through updates." ], "privacy": { "publicArtifact": "Aggregate counts only; no target lists, site/page keys, visitor identifiers or raw responses.", "underlyingCollection": "Pseudonymous technical research with coded site/page identifiers. Separate IP-derived daily buckets limit research admission to 20 distinct sites when trusted IP data is available; this is not a per-person or bot-proof limit.", "retention": "Research records are excluded after 90 days and removed by scheduled cleanup; aggregate snapshots may remain longer.", "policy": "https://webaloha.co/privacy-policy/#website-tool-research" }, "officialSources": [ "https://www.php.net/supported-versions.php", "https://www.php.net/eol.php", "https://www.php.net/archive/2026.php#2026-10-21-5", "https://www.php.net/archive/2026.php", "https://www.wiz.io/blog/php2shell-php-rce", "https://elementor.com/help/requirements/" ], "externalContext": { "source": "https://mallory.ai/blog/php-rce-rapid-response", "measurement": "Internet-facing network services with version banners, not the same population as checked sites", "upstreamEolPercent": 73.5, "sourceSnapshotDate": "2026-10-21", "checkedOn": "2026-10-25", "note": "The source corrected its earlier 59% estimate and also publishes fixed-version observations over time." }, "chartFiles": [ "branches.svg", "patch-reports.svg", "coverage.svg", "traffic.svg" ], "chartPngPackage": "charts-png.zip" }