PHP Compatibility Checker
PHP Compatibility Checker has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for PHP Compatibility Checker has a vendor fix available, so running the current release closes it.
All of these findings were reported by Kévin Mosbahi (Mika). PHP Compatibility Checker is installed on roughly 200,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.
CVE-2023-24421PHP Compatibility Checker <= 1.5.2 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

PHP Compatibility Checker
Author
WP Engine
WARNING: PHP Compatibility Checker is no longer actively maintained. This software is still free to use under the license provided, but users should be aware that it is not currently maintained. No additional releases, including security releases, will be made available. The WP Engine PHP Compatibility Checker can be used by any WordPress website on any web host to check PHP version compatibility. This plugin will lint theme and plugin code installed on your WordPress site and give you back a report of compatibility issues as reported by Tide for you to fix. Compatibility issues are categorized into errors and warnings and will list the file and line number of the offending code, as well as the info about why that line of code is incompatible with the chosen version of PHP. The plugin will also suggest updates to themes and plugins, as a new version may offer compatible code. This plugin does not execute your theme and plugin code, as such this plugin cannot detect runtime compatibility issues. Please note that linting code is not perfect. This plugin cannot detect unused code-paths that might be used for backwards compatibility, and thus might show false positives. We maintain a whitelist of plugins that can cause false positives. We are continuously working to ensure the checker provides the most accurate results possible. This plugin relies on Tide that constantly scans updated versions of plugins and themes in the background. Your scan results should be near real-time, but if not that just means Tide has not yet scanned your specific plugin or theme version. Please be patient as this may take up to 10 minutes for results to be returned from Tide. Please see the FAQ for more information. Update to PHP 7.4 Use this plugin to check your site for compatibility up to PHP 8.0! As of July 2022, 8.52% of WordPress websites run a PHP version older than PHP 7.0. These versions of PHP have been deprecated and unsupported for over 2 years. Only 7.1% of WordPress websites run PHP 8, the current main version of PHP. Disclaimer While this plugin is written to detect as many problems as accurately as possible, 100% reliable detection is very difficult to ensure. It is best practice to run comprehensive tests before you migrate to a new PHP version. The plugin was created by WP Engine to help the WordPress community increase adoption of modern PHP versions. We welcome contributors to this plugin, and are excited to see how developers and other WordPress hosts use this plugin. To disclose security issues for this plugin please email WordPress@wpengine.com.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C