Test if the server is affected by the Shellshock vulnerability.
As of April 2026, Shellshock Check is a WordPress security plugin with 30 active installations and a 5/5 rating from 4 reviews. It has been downloaded 3.9K+ times in total. Requires WordPress 3.0+ and PHP false+. Available on WordPress.org since 2014. Last updated 10 years ago — may have compatibility concerns. Top alternative: Wordfence Security – Firewall, Malware….
Shellshock is the code name for a security bug found in Bash shell, used on UNIX systems.
The bug allows attacker to trick Bash into running a program that it wasn’t supposed to. This has very serious security implications. Read more
Shellshock plugin tests for both disclosed shellshock vulnerabilities CVE-2014-6271 and CVE-2014-7169.
Created by ManageWP
This file is part of Shellshock Check.
Shellshock Check is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
Shellshock Check is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILIT…
| WordPress | 3.0+ requiredTested up to 4.3.34 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.