Php2shell
6 articles tagged Php2shell, newest first.

PHP2Shell ModSecurity Fix Blocking WordPress and Joomla Saves on cPanel
The cPanel ModSecurity fix for PHP2Shell turns on body inspection server-wide, so old rules block WordPress, Elementor and Joomla saves. How to check and fix.

PHP Is Not Out of the Woods Yet After PHP2Shell
A researcher claims six more unpatched PHP flaws after PHP2Shell. Unconfirmed, and nothing to do today, but PHP is not out of the woods. What to prepare now.

The PHP Project Advises Turning Off Session Upload Progress Until the Next Release
PHP has posted an informational advisory on session upload progress and CVE-2026-115560. Who needs to act, the one-line fix, and how to find sites with it on.

How mySites.guru Helps Agencies Firefight PHP2Shell at Scale
How agencies with client sites spread across many hosts and servers see which still run vulnerable PHP, chase the right host, and handle back-ported builds.

Joomla.org Is Offline After the PHP Security Release: What It Means for Your Site
joomla.org is offline after PHP's critical security release. Downloads, the JED and automated updates are down. What still works, and why PHP is the real job.

PHP's Critical Security Release and Your Joomla or WordPress Site
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two unauthenticated RCE flaws. Your host applies the update to your Joomla or WordPress site; 8.1 and older get none.