Checks a site's exposed PHP version against PHP critical RCE security release (21 Oct 2026) (CVE-2026-109618, CVE-2026-109619). Fixed: 8.5.12, 8.4.27, 8.3.36, 8.2.35. PHP 8.1 and older are EOL with no fix.
Header-based only; versions can be hidden or spoofed. JSON: /?url=example.com&code=PASSCODE&format=json