01Environment & action plan
Understand your setup
Review PHP, your CMS and hosting. Where public signals stop, we help confirm the details using your control panel and hosting provider.
PHP · WORDPRESS · WEBSITE SUPPORT
PHP security support.
From review to update.
Is your site affected? What needs updating?
Start with your URL. When public information isn’t enough, we help review your environment, plan updates and test the result.
- Support for WordPress and other PHP sites
- No technical expertise needed to get in touch
- Work starts after you approve the scope and cost
Steve vom WegeDeveloper of Tsumira · AI & software engineering · From GermanyFree PHP website check
Enter your website URL. We’ll look for public PHP version information to help identify your next step.
Not sure where to start?
SECURITY ADVISORY
About the PHP vulnerabilities
Reviewed：2026.10.21PHP has disclosed two critical vulnerabilities that can allow unauthenticated code execution. PHP installations serving web requests are in scope. Confirm your environment and the fixes supplied by your provider.
CVE-2026-109618CVE-2026-109619Fixed upstream PHP releases
| Branch | Fixed release |
|---|---|
| PHP 8.2 | 8.2.35or later |
| PHP 8.3 | 8.3.36or later |
| PHP 8.4 | 8.4.27or later |
| PHP 8.5 | 8.5.12or later |
Operating system and hosting vendors may backport fixes without adopting these version numbers. PHP 8.1 and earlier require confirmation from the vendor or migration to a supported branch.
What this check can—and cannot—tell you
The check looks for a publicly disclosed PHP version. It cannot confirm hidden environments or vendor backports. Neither an unknown version nor a fixed version indication proves safety or establishes whether a site has been compromised.
OUR SUPPORT
From environment review to functional testing
02Updates & compatibility
Plan and update
Check compatibility, prepare backups and a recovery plan, then update PHP and related software for your specific environment.
03Testing & handover
Make sure it works
Check important journeys such as enquiries, bookings and checkout. Receive a clear explanation of the work and the next steps.
Scope, cost and scheduling are agreed individually after reviewing your environment.
FOUNDER & DEVELOPER OF TSUMIRA
Building Tsumira.
Bringing practical AI to Japan.
The developer & product lead behind Tsumira.jp
Steve vom Wege
He designs and develops Tsumira, an AI workspace built to help businesses in Japan work beyond language and technology barriers—and focus on the work that matters.
A software engineer and entrepreneur from Germany, working in software development and digital businesses since 2010. His work spans PHP and e-commerce systems, generative AI, SaaS and creator platforms, combining architecture, hands-on delivery and business operations.
His previous work includes Interim CTO engagements at SHEKO and the Stuttgart Bar Association, alongside projects for Heise, BWT and Wempe. Today, his own products include Tsumira and Tsumira Foto for photography studios, with a focus on AI and digital services designed for real operational needs.
2010–Software & digital business experience
22External engagements (2013–2024)
90+Languages in an AI enquiry project
Tsumira
DESIGNED & DEVELOPED FOR JAPAN
An AI workspace for working across languages.
Tsumira connects CRM, bookings, projects, communication, quotations and invoicing. Its AI works with business data to find information, prepare analysis and propose next actions, with human confirmation for important operations. The goal is practical AI that fits the day-to-day work of small and medium-sized businesses and service teams in Japan.
Explore the Tsumira platform↗AI EXPERTISE
From AI capability to working business tools.
Generative AI & business assistants
Business-data retrieval, analysis and proposed actions in Tsumira, with permissions, consistent data and human confirmation built into the workflow.
Multilingual AI & medical technology
Led an AI specialist team at Majesty, working on product enquiries in more than 90 languages, translation AI and cloud solutions for medical technology.
Data quality & integration
Yanyi addresses AI-assisted master-data cleansing and migration, connecting operational needs across ERP, CRM and e-commerce systems.
AI & process automation
Product work includes item matching and enquiry processing in medical technology, and catalogue generation from ERP data, connecting AI to concrete business processes.
- PHP / Symfony / Laravel
- Python / TensorFlow / BERT
- TypeScript / React / Node.js
- PostgreSQL / MySQL
- Azure / Google Cloud
- Linux / Docker / CI/CD
OWN PRODUCTS & PORTFOLIO
Products he builds and develops.
Beyond Tsumira, his portfolio spans business SaaS, creator services and public-data products, combining product development with business responsibility.
Tsumira Foto
A platform for photography studios in Japan, connecting multilingual websites and customer acquisition with bookings, online payments, customer, wardrobe and staff management, and photo delivery. In early access, developed with feedback from working studios.
Explore projectAnimStream
A cross-platform streaming studio and digital content marketplace. Product development covers scenes, overlays, live-event triggers, AI voices, recording, clips and editing.
Explore projectversteckmich.de
A platform combining a service address and mail handling to protect creators’ private addresses, legal-notice and privacy-policy generators, and a Bio-Link page.
Explore projectSendMeSafe
Upload and sharing links, client portals, messaging, forms and access controls for recurring document workflows in professional services and other businesses.
Explore projectYanyi
AI-assisted master-data cleansing, standardisation and migration, addressing integration and consolidation across ERP, CRM and e-commerce systems.
Explore projectUSACrimeMap
A searchable map-based product using public US police and government data, with ingestion, classification, visualisation and traceable source information.
Explore projectCreatax / ASP Live
Digital client workflows for contracts, documents, deadlines and queries, alongside onboarding, training and operations for livestreaming agencies.
Explore project ASP Live ↗PREVIOUS CLIENT ENGAGEMENTS
Experience across industries and operational systems.
Selected external engagements from 2013–2024, showing each organisation’s sector and his technical contribution.
Wempe
2022Watch & jewellery retail
Shopware 6 backend and frontend features, payment integrations, product catalogues, and GitLab/CI/CD workflows.
PAUL HEWITT
2021Watches & accessories · E-commerce
Shopware 6 development and customisation, Symfony backend improvements, and Docker development environments.
BWT AG
2021Water-treatment technology & products · E-commerce
Shopware 6 features and integrations, PHP/Symfony improvements, and development infrastructure with Docker and GitLab.
Heise Gruppe
2020–2021Publishing & digital media
Shopware 6, PHP/Symfony backend optimisation, Vue.js frontend work, and implementation of a single sign-on API.
SHEKO GmbH
2020–2024Nutrition & wellness · Interim CTO
Technology and development-project leadership, backend implementation and optimisation, and stable, scalable IT infrastructure.
Majesty GmbH
2024ERP software & medical technology
Led an AI specialist team working on cloud solutions, multilingual product enquiries, translation AI and database optimisation.
USTOMED INSTRUMENTE
2018–2019Medical technology · Interim CTO
Shopware development and maintenance, PHP/MySQL integration and improvements, and Smarty/Symfony workflows.
Rechtsanwaltskammer Stuttgart
2017–2021Stuttgart Bar Association · Interim CTO
Digitalisation in the legal/public sector, alignment with data-protection and security requirements, TYPO3 development and operation, and process automation.
Experience and project descriptions are based on the CV supplied by Steve vom Wege (September 2026); the Japan vision reflects his stated goals. Named client engagements are historical and do not imply endorsement or use of this service.
An engineer with business responsibility.
His responsibilities also include Director roles at PERZEPTA CAPITAL PLC, SQAN LTD and SourceArt Ltd, connecting AI, business SaaS and creator services with the practical demands of building and operating a business.
Start with a clearer picture of your website.
Discuss your technical needs→HOW IT WORKS
Three steps from enquiry to support
- STEP 01
Check or get in touch
Share your URL and what’s happening. You can contact us even if an automatic check is inconclusive.
- STEP 02
Review & estimate
We explain the scope, what we need to check, and the cost. Work starts after your approval.
- STEP 03
Resolve & report
We carry out the agreed work, check the relevant functionality and share the results.
PRACTICAL GUIDES
Find the right next step
Practical steps for version checks, WordPress updates and errors, with official references.
PHP2Shell explained: CVE-2026-109618 and CVE-2026-109619
A detailed defensive analysis of PHP request-state flaws, OOM, stale references, mod_php and FPM exposure, vendor fixes, mitigation limits and evidence of remediation.
Read the guide →PHP vulnerability remediation: Ubuntu, Debian, RHEL and Docker
A detailed administrator guide with commands for inventory, recovery planning, package updates, FPM and Apache restarts, Docker recreation and verification.
Read the guide →How to check PHP version in WordPress and hosting panels
Find the PHP actually serving your website. Compare hosting settings, WordPress Site Health and command-line PHP without exposing server information.
Read the guide →FAQ
Before you get in touch
Does this check prove my website is safe?
No. This is a passive check for PHP version information in public response headers. It cannot establish safety, detect a compromise or inventory every server. Even a fixed version indication requires confirmation of your actual environment.
Why couldn’t my website be checked?
PHP versions are often hidden. CDNs and access restrictions can also prevent a check. An inconclusive result does not mean there is no issue. A manual review uses your hosting provider or control panel information.
Can you help with WordPress?
Yes. You can ask about WordPress and other PHP-based sites. The review considers server PHP as well as CMS and plugin compatibility.
How much does it cost?
The passive check is free. Investigation and update costs depend on the environment and scope. We provide an estimate and wait for your approval before beginning work.
Should I send a password?
No. Do not submit passwords, private keys or logs containing personal data. If access is needed, we will arrange a suitable method after agreeing the scope.
CONTACT
Talk to us about your website
Share what you know. If you ran a check, its result will be linked to your enquiry.