https://hackingpassion.com/tags/php2shell/Recent content in PHP2Shell on HackingPassion.com : root@HackingPassion.com-[~]HugoenWed, 21 Oct 2026 16:50:01 +0200https://hackingpassion.com/php2shell-critical-php-rce/Wed, 21 Oct 2026 16:50:01 +0200https://hackingpassion.com/php2shell-critical-php-rce/<p><strong>More than 22 million PHP installations sat exposed online this week, facing two flaws that need no password.</strong> The details leaked before a patch existed. <strong>Updating WordPress does not fix it.</strong> The flaw is in PHP itself, the back end of most of the web.</p> <p>On Tuesday, October 20, details of two unpatched holes in PHP started spreading online. A post on Hacker News announced that someone would disclose the bugs on October 22, with no patch ready. The post came down, but the screenshots had already gone around, including one of an exploit tool called <strong>PHP2Shell</strong>. Security firm watchTowr looked at what leaked and confirmed the flaws were genuine and allowed remote code execution. PHP had planned a quiet, scheduled fix. Instead it had to put one out while the details were already public.</p>