Detecting PHP2Shell and Other PHP Vulnerabilities with ZAP Posted Thursday October 22, 2026 707 Words PHP2Shell is the latest big “named” vulnerability. ZAP can now tell you if a site is running a vulnerable version of PHP, and it does so without sending a single extra request.