𝕏xFR first seen 18 h ago, last 17 min ago, peak #2

Two critical PHP flaws allow unauthenticated remote code execution

Original: So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is

PHP was hit with two critical vulnerabilities that allow attackers to run arbitrary code on servers without any authentication, affecting popular platforms including WordPress, MediaWiki, Magento, Joomla and Laravel. Making matters worse, technical details of the flaws leaked before an official patch was available, leaving administrators exposed and prompting urgent calls to apply mitigations immediately.

Why now: Details of the flaws leaked before a patch was released, creating urgent risk for millions of sites running PHP-based platforms.

PHPWordPressMediaWikiMagentoJoomla

Open on x →

Rank over time, top of the chart is #1. 4 snapshots from 18 h ago to 17 min ago.

Evidence

• So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and · fiveoutofnine · 63.2K

Elsewhere

• 𝕏xGB #3 · 17 h ago

API: https://socialmediatrends-api.osmike.com/v1/trends/3173365