PHP2Shell emergency threat brief: Wiz Research analyzes PHP unauthenticated RCE vulnerabilities

Wiz Research released an emergency threat brief on PHP2Shell, explaining two critical PHP vulnerabilities it discovered and responsibly disclosed that can lead to unauthenticated RCE. The vulnerabilities affect widely used PHP versions (including older versions that no longer receive patches) and could affect WordPress, Drupal and MediaWiki. The brief also covers the discovery process of AI-driven security research and mitigation options for systems that cannot be patched immediately.