Cyber
9.6
Two critical PHP RCE flaws (PHP2Shell) actively exploited; remediation urged
Published 1 d ago5 sourcesEvidence: Reported
SeverityHighAssessedDeveloping storyRecorded Future BlogWell-rated source
CyberReportedHighDevelopingFeatured
7.5
PHP2Shell RCE Patches Released as First Exploitation Attempts Detected
Patches for two remote code execution vulnerabilities in PHP2Shell have been released, with the first exploitation attempts already hitting sensors. The flaws affect WordPress, Drupal, Joomla, and other popular applications, posing a significant risk to web environments. Organizations are urged to apply patches immediately to mitigate potential compromise.
Score Breakdown
Mosaic Score7.5
Model confidence0.5
Significance0.8
Source credibility0.3
Related signals
8 foundCyber
8.3
Cloudflare CEO reports millions of exploit attempts after critical web vulnerability
Published 4 h ago8 sourcesEvidence: Unknown
SeverityHighAssessedDeveloping storyBlicLow-rated source
Cyber
6.7
Critical PHP RCE Flaws Leaked, Mass Exploitation Expected
Published 1 d ago2 sourcesEvidence: Reported
SeverityHighAssessedDeveloping storySecurityWeekLow-rated source
Cyber
5.6
PHP2Shell Exploited Days Before Patch; Mass Attacks Follow
Published 1 h ago2 sourcesEvidence: Reported
SeverityModerateAssessedDeveloping storySecurityWeekLow-rated source
Cyber
5.5
CISA warns of active Plex2Shell attacks chaining four Plex Media Server flaws
Published 16 h ago2 sourcesEvidence: Reported
SeverityModerateAssessedDeveloping storyBleepingComputerLow-rated sourceUS
Cyber
5.1
F5 issues out-of-band patches for critical NGINX RCE flaws
Published 2 d ago1 sourceEvidence: Unknown
SeverityModerateAssessedDeveloping storyBleepingComputerLow-rated sourceUS
Cyber
9.4
Critical PHP Flaws Exploited via AI Tools Threaten 70% of Web
Published 18 h ago6 sourcesEvidence: Unknown
SeverityCriticalAssessedDeveloping storyLe SoirLow-rated sourceBE · FR · NL
Cyber
9.1
PHP vulnerabilities found via AI; world leaders warn of widespread web risk
Published 11 h ago6 sourcesEvidence: Reported
SeverityHighAssessedDeveloping storyAl Jazeera