PHP2Shell: What WordPress Site Owners and Hosts Need to Know
PHP2Shell is a critical flaw in the PHP engine beneath WordPress and other CMSs—not a plugin bug—and researchers reported exploitation soon after emergency fixes were released. We explain how the vulnerabilities work, what web hosts should do to protect and patch servers, and the practical dos and don’ts for site owners, including checking your PHP version and confirming updates with your host.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.