Free open-source scanner: is your PHP version vulnerable to php2shell (CVE-2026-109618 / CVE-2026-109619)? Disclosure-only — no exploit probes.