php2shell: Critical flaws allow code injection in PHP

Two flaws expose PHP web servers to remote attacks. Versions from the past 20 years are affected; admins should patch.

Critical PHP updates on Oct. 21 fix code injection vulnerabilities

Technical details are due at 4 p.m., but the situation is serious: Remote code execution is possible. Admins should weigh the ...
BleepingComputer

W3 Total Cache WordPress plugin vulnerable to PHP command injection

A critical flaw in the W3 Total Cache (W3TC) WordPress plugin can be exploited to run PHP commands on the server by posting a comment that contains a malicious payload. The vulnerability, tracked as ...

When Cybersecurity Takes a Website Offline: How AI Can Detect PHP Vulnerabilities

Taking a website offline is not always a failure of cybersecurity. In some circumstances, it is a deliberate containment ...