PHP2Shell Advisory

Summary

Lean Coffee Table has determined that there is currently no evidence of exposure or compromise
resulting from the PHP2Shell vulnerability.

Details

Lean Coffee Table does not use PHP for our main website we do however make use of Word Press which is a PHP application and hosted in a separate data centre to our main site for news articles.

On the 21 October 2026 out of an abundance of caution Lean Coffee Table blocked access to our Word Press Blog from the Internet so we could asses the situation as part of procedures found in our Information Security Management System.

We pulled down the logs files from the server and analysed them for traces of the PHP2Shell exploit and found none. We then contacted our hosting provider regarding the exploit who advised us they had blocked the signature for the attack at the firewall and that it was not necessary to block access to our blog system as their in-house security team had proactively acted on the announcement made by the PHP team.

If you require further information, please contact us.