{"id":392425,"date":"2026-10-26T11:00:51","date_gmt":"2026-10-26T11:00:51","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/jaz-x-php-security-guardian\/"},"modified":"2026-10-26T11:00:43","modified_gmt":"2026-10-26T11:00:43","slug":"jaz-x-php-security-guardian","status":"publish","type":"plugin","link":"https:\/\/xho.wordpress.org\/plugins\/jaz-x-php-security-guardian\/","author":23558679,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.2","stable_tag":"1.0.2","tested":"7.1.3","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"JAZ-X PHP Security Guardian","header_author":"JAZ-X Innovation","header_description":"Read-only PHP runtime security advisories and WordPress maintenance checks with administrator alerts.","assets_banners_color":"","last_updated":"2026-10-26 11:00:43","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/www.jazx.online\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":51,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.2":{"tag":"1.0.2","author":"jazxinnovation","date":"2026-10-26 11:00:43","revision":3766204}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3766204,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3766204,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.2"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[34356,5603,662,600,6460],"plugin_category":[54],"plugin_contributors":[279727],"plugin_business_model":[],"class_list":["post-392425","plugin","type-plugin","status-publish","hentry","plugin_tags-health-check","plugin_tags-monitoring","plugin_tags-php","plugin_tags-security","plugin_tags-vulnerability","plugin_category-security-and-spam-protection","plugin_contributors-jazxinnovation","plugin_committers-jazxinnovation"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/jaz-x-php-security-guardian\/assets\/icon-128x128.png?rev=3766204","icon_2x":"https:\/\/ps.w.org\/jaz-x-php-security-guardian\/assets\/icon-256x256.png?rev=3766204","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>JAZ-X PHP Security Guardian is a free administrator-only security advisory dashboard. It helps site owners check whether their PHP version meets the upstream fixes published on October 21, 2026 for CVE-2026-109618 and CVE-2026-109619.<\/p>\n\n<p>Features:<\/p>\n\n<ul>\n<li>Shows PHP runtime version and compares it to the published patched releases for PHP 8.2, 8.3, 8.4, and 8.5.<\/li>\n<li>Warns administrators when their PHP release is below the upstream fix threshold.<\/li>\n<li>Provides links to official PHP security guidance.<\/li>\n<li>Shows cached WordPress core, theme, and plugin update counts.<\/li>\n<li>Shows WP_DEBUG and PHP display_errors configuration status.<\/li>\n<li>Lets administrators record a hosting provider's written backport or mitigation statement without treating it as independently verified.<\/li>\n<li>Optionally sends administrator emails when a potentially affected PHP runtime is newly detected or its reported version changes, using WordPress cron.<\/li>\n<li>Keeps all checks read-only; no automatic file modifications, remote scans, or PHP version changes.<\/li>\n<\/ul>\n\n<p>Important limits:<\/p>\n\n<ul>\n<li>This plugin does NOT patch PHP vulnerabilities or block exploit traffic. Some exploits can run before WordPress loads.<\/li>\n<li>A version-number comparison alone cannot determine whether a host has vendor backports or external mitigations.<\/li>\n<li>A patched PHP version does not imply a WordPress site is entirely secure.<\/li>\n<li>The included CVE thresholds are a reviewed static snapshot, not a live vulnerability database. Future advisories require plugin updates.<\/li>\n<li>WordPress cron depends on site activity and is not a guaranteed exact-time security alert mechanism.<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin ZIP using Plugins &gt; Add New &gt; Upload Plugin.<\/li>\n<li>Activate JAZ-X PHP Security Guardian.<\/li>\n<li>Open Tools &gt; PHP Security Guardian.<\/li>\n<li>Review the PHP report and contact your hosting provider for any vendor-specific patch\/backport confirmation.<\/li>\n<li>Optionally save a hosting response and configure email alerts.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20this%20plugin%20fix%20cve-2026-109618%20and%20cve-2026-109619%3F\"><h3>Does this plugin fix CVE-2026-109618 and CVE-2026-109619?<\/h3><\/dt>\n<dd><p>No. Only a security-patched PHP runtime (including correctly applied, vendor-supported backports) addresses the underlying problem. This plugin is a monitoring and guidance tool.<\/p><\/dd>\n<dt id=\"is%20the%20php%20version%20warning%20proof%20my%20host%20is%20exploitable%3F\"><h3>Is the PHP version warning proof my host is exploitable?<\/h3><\/dt>\n<dd><p>No. Some hosts use security backports or other controls which a WordPress plugin cannot verify. Ask your provider for a written statement and prioritize a supported patched runtime.<\/p><\/dd>\n<dt id=\"does%20it%20send%20any%20site%20information%20to%20an%20outside%20service%3F\"><h3>Does it send any site information to an outside service?<\/h3><\/dt>\n<dd><p>No. This version has no external telemetry or vulnerability scanning API calls. WordPress' own built-in update checking operates separately. Optional alert emails go to the site's configured administrator address.<\/p><\/dd>\n<dt id=\"does%20it%20modify%20php%20or%20wordpress%20settings%3F\"><h3>Does it modify PHP or WordPress settings?<\/h3><\/dt>\n<dd><p>No. Checks are read-only, except plugin preferences and alert state stored locally in the WordPress options table.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.2<\/h4>\n\n<ul>\n<li>Match translation text domain to WordPress.org assigned plugin slug. No changes to monitoring or settings.<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Added WordPress.org readme compatibility header and language directory.<\/li>\n<li>Documented read-only success notice nonce exception for static analysis.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial PHP advisory dashboard for the two October 2026 critical vulnerabilities.<\/li>\n<li>Added version threshold check, administrator warning, cached update signals, host notes, and optional daily email alerts.<\/li>\n<\/ul>","raw_excerpt":"Read-only PHP runtime security advisory monitoring and WordPress maintenance checks.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/392425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=392425"}],"author":[{"embeddable":true,"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/jazxinnovation"}],"wp:attachment":[{"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=392425"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=392425"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=392425"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=392425"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=392425"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/xho.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=392425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}