⚠ php2shell critical PHP RCE · patched in 8.2.35+ 8.3.36+ 8.4.27+ 8.5.12+ · 372 NotResolved →
477 sites · Resolved 111 · NotResolved 372 · No action needed 2
| Site URL | PHP version | Type | Status | CMS | Contact | Last checked | |
|---|---|---|---|---|---|---|---|
| wmoda.org.et | PHP 8.3.35 | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:29 | |
| evidence: X-Powered-By: PHP/8.3.35, PleskLin (https://wmoda.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| ethstat.org.et | Hidden | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:29 | |
| evidence: Set-Cookie: PHPSESSID · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| ihoethiopia.org.et | PHP 8.1.34 | et_tld high | NotResolved | WordPress | aetsdhawassa@gmail.com | 2026-10-22 09:29 | |
| evidence: X-Powered-By: PHP/8.1.34, PleskLin (https://www.ihoethiopia.org.et/) · Link: WordPress REST API · HTML: WordPress markers · HTML: same-site link/form to https://www.ihoethiopia.org.et/wp-login.php?redirect_to=https%3A%2F%2Fwww.ihoeth… | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| nebe.org.et | Hidden | et_tld medium | NotResolved | Drupal | — | 2026-10-22 09:28 | |
| evidence: HTML: Drupal markers | region: et_tld:domain ends in .et | |||||||
| ocsa.org.et | PHP 8.1.34 | et_tld high | NotResolved | WordPress | info@ocsa.org.et +1 | 2026-10-22 09:28 | |
| evidence: X-Powered-By: PHP/8.1.34 (https://ocsa.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| ewnhs.org.et | PHP 7.4.33 | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:28 | |
| evidence: X-Powered-By: PHP/7.4.33 (https://ewnhs.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| islamic-relief.org.et | Hidden | et_tld medium | NotResolved | — | — | 2026-10-22 09:28 | |
| evidence: HTML: same-site link/form to blog-index.php | region: et_tld:domain ends in .et | |||||||
| occi.org.et | PHP 7.4.33 | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:28 | |
| evidence: X-Powered-By: PHP/7.4.33 (https://occi.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| grandconsulting.org.et | PHP 8.2.35 | et_tld high | Resolved | WordPress | grandconsultingplc@gmail.com | 2026-10-22 09:28 | |
| evidence: X-Powered-By: PHP/8.2.35, PleskLin (https://grandconsulting.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| emwa.org.et | Hidden | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:28 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| eaf.org.et | PHP 8.3.36 | et_tld high | Resolved | WordPress | — | 2026-10-22 09:28 | |
| evidence: X-Powered-By: PHP/8.3.36, PleskLin (https://eaf.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| eva.org.et | PHP 8.4.26 | et_tld high | NotResolved | WordPress | info@eva.org.et | 2026-10-22 09:28 | |
| evidence: X-Powered-By: PHP/8.4.26 (https://eva.org.et/) · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| forum.org.et | Hidden | et_tld high | NotResolved | Laravel | — | 2026-10-22 09:28 | |
| evidence: Set-Cookie: Laravel session | region: et_tld:domain ends in .et | |||||||
| armor.org.et | PHP 8.3.36 | et_tld high | Resolved | — | — | 2026-10-22 09:28 | |
| evidence: X-Powered-By: PHP/8.3.36, PleskLin (https://armor.org.et/) · HTML: same-site link/form to index.php | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| ethiondc.org.et | Hidden | et_tld high | NotResolved | WordPress | %20ethiopianndc@gmail.com | 2026-10-22 09:28 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| elsa.org.et | PHP 8.3.35 | et_tld high | NotResolved | WordPress | info@elsa.org.et | 2026-10-22 09:28 | |
| evidence: X-Powered-By: PHP/8.3.35 (https://elsa.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||
| epaethiopia.org.et | Hidden | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:28 | |
| evidence: Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| ethiojobs.org.et | PHP 7.4.33 | et_tld high | NotResolved | — | — | 2026-10-22 09:27 | |
| evidence: X-Powered-By: PHP/7.4.33 (https://ethiojobs.org.et/) | region: et_tld:domain ends in .et | |||||||
| ecae.org.et | PHP 8.2.34 | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:27 | |
| evidence: X-Powered-By: PHP/8.2.34, PleskLin (https://ecae.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et · et_hosted:server IP geolocates to ET | |||||||
| ethada.org.et | PHP 7.4.33 | et_tld high | NotResolved | WordPress | — | 2026-10-22 09:27 | |
| evidence: X-Powered-By: PHP/7.4.33 (https://ethada.org.et/) · Link: WordPress REST API · HTML: WordPress markers | region: et_tld:domain ends in .et | |||||||