Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.

PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.