I had plans for that second

Two unauthenticated remote code execution (RCE) vulnerabilities in PHP, dubbed 'php2shell', have been identified and are actively exploited. The flaws affect all PHP versions since 5.4, with no patches available for versions 8.1 and older, which are end-of-life. Given PHP's widespread use in platforms like WordPress, Drupal, and WooCommerce, the potential impact is significant across industries. Cisco Talos has released Snort signatures 67359 and 67360 for detection and urges immediate upgrade to PHP 8.2 or later to mitigate risk.

AI-extracted · verify before operational use