PHP2Shell is the latest big “named” vulnerability. ZAP can now tell you if a site is running a vulnerable version of PHP, and it does so without sending a single extra request.
Detecting PHP2Shell and Other PHP Vulnerabilities with ZAP
calendar_today
October 22, 2026
domain
owasp-zap