PHP2Shell
PHP2Shell appears in 33 analyzed articles across the measured technology press. Recent coverage is steady, counting every mention over recent months. This page shows the public snapshot: movement, coverage mix, recent sources, and what drove the latest change.
Compass measures press coverage, not PHP2Shell's product quality, business performance, or market value.
Counting every mention, coverage of PHP2Shell is steady — it appears in 33 analyzed articles across the technology press.
What PHP2Shell coverage is made of over time: story type, claim stage as reported, and press framing. This measures the coverage, not the product.
Across 29 classified coverage items, one item is 3.4 percentage points — read the shares below as the shape of a small sample, not as figures precise to the point.
Story type and claim stage are shares of the 29 classified coverage items in this window.
How to read this
The stream below stacks each month's coverage by the lens you choose: Tone (how the press frames the story — promotional, skeptical, critical, or neutral), Story type (launches, funding, lawsuits, partnerships…), or Stage — how far the reported claim has gone: speculation → announcement → launch → results.
Taller bands mean more coverage that month; the dots beneath mark notable non‑neutral events. Every signal is sourced and dated.
How this is counted — why the article numbers differ
33 articles mention PHP2Shell across the corpus. The coverage make-up above is measured on the 24 of them that were read into dated, classified coverage items — and one article can produce more than one item, because story type, claim stage and framing are read separately.
- report Attackers began targeting the PHP2Shell vulnerabilities four days before patches were released.
- report PHP2Shell forced 32 UK government services offline and left four partially unavailable.
3 posts on company and project channels mention PHP2Shell across the full 15-month record. They come from any company or project channel Compass reads, not only PHP2Shell's own. They are counted separately from the 33 press articles.
Where they were published:The Cloudflare Blog · 2Docker · 1
- Oct 22, 2026Docker began tracking two critical PHP vulnerabilities known as PHP2Shell.Docker
- Oct 21, 2026Cloudflare launched managed protections for the php2shell vulnerability using the new capability.The Cloudflare Blog
- Oct 21, 2026Cloudflare deployed WAF mitigations for the php2shell vulnerabilities before public disclosure.The Cloudflare Blog
Press coverage and company and project posts are two separate counts. Every press figure on this page, including the monthly line and the rising or falling call, comes from the independent press only. Before October 2026, Compass counted these posts as press coverage. How this is measured.
As of 23 Oct 2026 · corpus coverage 94% · 374,043 articles. Correlational & coverage-limited.
- ✓
This snapshotDirection, footprint & coverage make-up — free, no account, always
- 🔒
Full history & coverage trailMonth-by-month make-up & every cited source
- 🔒
ConnectionsThe topics it's most often covered alongside
- 🔒
Compare & exportBenchmark vs. other topics; export the source pack
- 🔒
Watchlist & alertsGet pinged when the make-up or direction shifts