Best php2shell plugins for WordPress
The most popular php2shell plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. CMS ADMINS Security Check Report leads with 400+ active installs, ahead of VulnCue (10+) and Nubivio Security Headers, security.txt & NIS2 Compliance for Healthcare (fewer than 10). All 3 plugins tagged “php2shell” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 3 php2shell plugins
- 1.
CMS ADMINS Security Check ReportThe most installed php2shell plugin, with 400+ active installs. Only 2 reviews so far, updated 2 weeks ago.
- 2.
VulnCue10+ active installs. Only 1 review so far, updated 1 week ago.
- 3.
Nubivio Security Headers, security.txt & NIS2 Compliance for HealthcareFewer than 10 active installs. No reviews yet, updated 2 days ago.
All 3 plugins tagged “php2shell”

CMS ADMINS Security Check Report
Up in the last 7 days:76#9,248by Patrick Schlesinger16 days ago
Read-only security audit for WordPress: 62 checks including PHP2Shell, an A to F grade, and a checklist that records what you have fixed.
- Installs
- 400+
- Rating
- 5.0(2)
- Downloads
- 22/day

VulnCue
#39,435by vulncue10 days ago
Scans your WordPress security and tells you what to fix. Connect an account for alerts on new vulnerabilities.
- Installs
- 10+
- Rating
- 5.0(1)
- Downloads
- 11/day

Nubivio Security Headers, security.txt & NIS2 Compliance for Healthcare
Up in the last 7 days:7,805#59,038by nubivio2 days ago
Security headers, security.txt, a PHP2Shell runtime check and an optional CRA, GDPR and NIS2 scanner for healthcare WordPress sites.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day